IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow

Exploit Title: IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow Exploit Author: Paolo Stagno aka VoidSec Vendor Homepage: https://www.ibm.com/support/knowledgecenter/en/SSGSG77.1.0/com.ibm.itsm.tsm.doc/welcome.html Version: 5.2.0.1...

IBM Tivoli Storage Manager 5.2.0.1 Buffer Overflow

Exploit Title: IBM Tivoli Storage Manager Command Line Administrative Interface 5.2.0.1 - id' Field Stack Based Buffer Overflow Exploit Author: Paolo Stagno aka VoidSec Vendor Homepage: https://www.ibm.com/support/knowledgecenter/en/SSGSG77.1.0/com.ibm.itsm.tsm.doc/welcome.html Version: 5.2.0.1...

Driver Disk for Qlogic qede 8.30.13.0 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x. Current Release who use qlogic's qede driver and wish to use the latest version of the following: Driver Module| Version ---|--- qede| 8.30.13.0 Issues Resolved In this Driver Disk Includes general enhancements and bug...

Hotfix XS82E009 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX284874 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Driver Disk for Broadcom megaraid sas 07.706.03.00 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer Current Release 7.2 or later who use Broadcom's megaraidsas driver and wish to use the latest version of the following: Driver Module| Version ---|--- megaraidsas| 07.706.03.00 Issues Resolved In this Driver Disk Includes...

Cisco Secure Web Appliance Elevation of Privilege Vulnerability

Cisco AsyncOS is an operating system for Cisco devices from Cisco USA. Cisco AsyncOS for the Cisco Secure Web Appliance suffers from an operating system command injection vulnerability that stems from insufficient validation of user-supplied web interface and CLI input. The vulnerability can be...

The vulnerability of the command-line interface of the Cisco Integrated Management Controller allows a hacker to discover all existing user names.

The vulnerability of the command-line interface of the Cisco Integrated Management Controller remote management device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to discover all existing user names...

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to enhance their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.

The vulnerability of the command-line interface CLI of the programmatically defined Cisco SD-WAN network is related to an incorrect path name limitation for the directory. Exploiting this vulnerability could allow a attacker to cause service failures...

Zimbra Collaboration Server 9.x < 9.0.0 P2 XSS

According to its self-reported version number, Zimbra Collaboration Server is 9.x prior to 9.0.0 Patch 2. It is, therefore, affected by a cross-site scripting XSS vulnerability in the web client. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially craft...

Palo Alto Networks PAN-OS Log Message Disclosure Vulnerability (CNVD-2020-63187)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. Palo Alto Networks PAN-OS suffers from a log message disclosure vulnerability that stems from the fact that a proxy server's password may be displayed in plaintext when using the CLI,...

Zimbra Collaboration Server < 8.8.15 P11 / 9.x < 9.0.0 P4 XSS

According to its self-reported version number, Zimbra Collaboration Server is below 8.8.15 Patch 11, or 9.x prior to 9.0.0 Patch 4. It is, therefore, affected by a cross-site scripting XSS vulnerability in the Webmail component. An unauthenticated, remote attacker can exploit this, by convincing ...

Leonidas - Automated Attack Simulation In The Cloud, Complete With Detection Use Cases

Leonidas is a framework for executing attacker actions in the cloud. It provides a YAML-based format for defining cloud attacker tactics, techniques and procedures TTPs and their associated detection properties. These definitions can then be compiled into: A web API exposing each test case as an...

[SECURITY] Fedora 32 Update: xen-4.13.2-1.fc32

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 33 Update: xen-4.14.0-9.fc33

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

linuxkernel_pwn

It is an offensive tool for Linux kernel exploitation. The repository contains a Makefile that compiles and builds two exploits: expdoublefetch and expsidechannel. The primary CVE ID is not explicitly mentioned, but the exploits target Linux kernel vulnerabilities. The probable entry points are t...

The vulnerability of the command-line interface of the FXOS operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the command-line interface of the FXOS operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command line. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with root privileges...

curl: Incorrect argument check can allow remote servers to overwrite local files

A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options. Requesting content from a malicious server could lead to overwriting local files with compromised files leading to unknown effects. The highest threat from this vulnerability is...

The vulnerability of the command-line interface of Cisco Firepower Threat Defense microprogramming systems allows attackers to gain access to hidden commands.

The vulnerability of the command-line interface of Cisco Firepower Threat Defense software-related microprogramming systems is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow attackers to gain access to hidden commands...

Citrix LTSR Assistant Tool

Please note: You can download the required file from the Citrix downloads website by visiting the following link: https://www.citrix.com/downloads/citrix-tools LTSR Assistantv2.9.0.1 Created Date: Apr 12, 2016 Updated Date: Apr 16, 2025 What's New inv2.9.0.1 Fixed a sporadic issue that prevented...