CVE-2023-30502

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the...

Design/Logic Flaw

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the...

Design/Logic Flaw

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the...

Design/Logic Flaw

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the...

CVE-2023-30508

CVE-2023-30508 involves multiple authenticated path traversal vulnerabilities in the Aruba EdgeConnect Enterprise command line interface. The root cause is path traversal in the CLI, enabling an attacker with authenticated access to read arbitrary files on the underlying operating system, includi...

CVE-2023-30506

CVE-2023-30506 describes a vulnerability in the Aruba EdgeConnect Enterprise CLI that allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to full system compromise. The vulnerability affects the Aruba EdgeConnect Enterpr...

CVE-2023-30505

CVE-2023-30505 affects Aruba EdgeConnect Enterprise CLI. The vulnerability allows remote authenticated users to run arbitrary commands on the underlying host, with the ability to execute as root and potentially achieve complete system compromise. The affected component is the command line interfa...

CVE-2023-30504

Summary (mode C): The CVE-2023-30504 issue affects Aruba EdgeConnect Enterprise, specifically its command-line interface. The connected PT-2023-8735 entry describes an authenticated remote code execution path where remote authenticated users can execute arbitrary OS commands as root, potentially ...

CVE-2023-30503

Aruba EdgeConnect Enterprise Command Line Interface is affected by an authenticated remote code execution vulnerability. The exposed component is the CLI, and the vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially...

CVE-2023-30502

CVE-2023-30502 concerns Aruba EdgeConnect Enterprise CLI, where remote authenticated users can execute arbitrary commands on the underlying OS with root privileges, potentially compromising the entire system. Affected software is Aruba EdgeConnect Enterprise CLI; root-level command execution is t...

CVE-2023-30501

CVE-2023-30501 affects Aruba EdgeConnect Enterprise CLI. A vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host, gaining root privileges and potentially full system compromise. Public details consistently describe the CLI as vulnerable and do not sp...

The vulnerability of the libcms_cli module in NETGEAR RAX30 router microprogramming software allows a hacker to execute arbitrary code in the root context.

The vulnerability of the libcmscli module in NETGEAR RAX30 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the root context...

in-toto vulnerable to Configuration Read From Local Directory

Impact The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification 1. Among the files read is .intotorc which is a hidden file in the directory in which in-tot...

GHSA-WC64-C5RV-32PF in-toto vulnerable to Configuration Read From Local Directory

Impact The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification 1. Among the files read is .intotorc which is a hidden file in the directory in which in-tot...

Malicious code in wagyu-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef98b86deb0d82a3874d3caaafddc65b5389ca664ff9bc949a3c3c8ee43a8b83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-955 Malicious code in wagyu-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef98b86deb0d82a3874d3caaafddc65b5389ca664ff9bc949a3c3c8ee43a8b83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Trucking on with DotDumper

Trucking on with DotDumper By Trellix · May 11, 2023 This blog was written by Max Kersten On the 11th of August 2022, the initial public version of DotDumper was released. A brief refresh: DotDumper is an open-source automatic unpacker for DotNet Framework targeting files. This blog marks a publi...

CVE-2023-32076

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...

CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...

CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...