PT-2024-29133 · Ffri · Ffri Amc

Name of the Vulnerable Software and Affected Versions: FFRI AMC versions 3.4.0 to 3.5.3 Some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 Description: The issue allows a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an...

Arris VAP2500 安全漏洞

The Arris VAP2500 is a wireless video access point device from Arris USA. A security vulnerability exists in the Arris VAP2500 version 08.50, which stems from an action on the parameter cmbheader/txtcommand in the file /toolscommand.php that can result in command injection...

PT-2024-23000 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A critical issue was found in the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to a stack-based buffer overflow. This issue can be...

PT-2024-15940

Name of the Vulnerable Software and Affected Versions flink-extended ai-flow version 0.3.1 Description A critical issue has been found, affecting the function cloudpickle.loads of the file ai flowclicommandsworkflow command.py. This issue leads to deserialization and can be exploited remotely. Th...

CVE-2023-25133

Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel Business Local/Remote for Linux 32bit v4.8.6 and earlier, PowerPanel Business Local/Remote...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...

CVE-2021-1256 Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files...

CVE-2020-7601

gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options...

Meinberg Funkuhren Lantime M300 and Meinberg Funkuhren Lantime M1000 Command Injection Vulnerabilities

The Meinberg Funkuhren Lantime M300 and the Meinberg Funkuhren Lantime M1000 are both rack-mounted time servers from Meinberg Funkuhren in Germany. A security vulnerability exists in the Meinberg Funkuhren Lantime M300 and Meinberg Funkuhren Lantime M1000. The vulnerability can be exploited to...

The vulnerability of the imap/command.c file in Mutt and NeoMutt clients arises from errors in handling the character size of IMAP status messages. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the imap/command.c file in Mutt and NeoMutt lies in errors in handling the character size of IMAP status messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DEBIAN-CVE-2012-1114

A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the filter parameter to cmd.php in an export and exporterid action. and the filteruid parameter to list.php...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-28584)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'GMCommand' function in the magick/command.c file in GraphicsMagick version 1.3.26. A remote attacker can exploit this...

SentryHD 02.01.12e - Local Privilege Escalation

SentryHD 02.01.12e - Local Privilege Escalation ''' Exploit Title: SentryHD 02.01.12e Privilege Escalation Date: 18-01-2017 Software Link: http://www.minutemanups.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: local 1...

Cisco AnyConnect Secure Mobility Client IPC Command File Modification Vulnerability

Cisco AnyConnect Secure Mobility is a secure enterprise mobility solution. Cisco AnyConnect Secure Mobility Client fails to properly validate IPC commands, allowing a local attacker to exploit the vulnerability to modify arbitrary files with elevated privileges...

Gnupg2 '/scd/command.c' Double Free Denial of Service Vulnerability

GnuPG is a Python module that allows, from a Python program, to conveniently use the key management, encryption and signing features of GnuPG. A denial of service vulnerability exists in Gnupg2 '/scd/command.c', which can be exploited by an attacker to launch a denial of service attack...

kvt format bug

kdebase-1.1.2 xsetup.c:229 displayname = getenv"DISPLAY"; command.c:1720 extern char displayname; command.c:1840 cprintfdisplayname; command.c:1464 void cprintfunsigned char fmt,... Patch attached. -- Carlos E Gorges [email protected] Tech informбtica LTDA Brazil...

CVE-2000-0646

WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS STAT command while the file is being transferred...

foolproof-bypass.txt

FoolProof found to be full of security glitches FoolProof a product by SmartStuff was intentionally programed to stop users from increasing computer maintaince by installing new software, changing the current computer configuration and so on by limiting the functions a user can do. The mentioned...