Lucene search
+L

8254 matches found

Github Security Blog
Github Security Blog
added 2023/09/04 5:2 p.m.28 views

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it

Summary hyper-bump-it reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched files should be contained within the project root directory, but that is n...

5.5CVSS6.8AI score0.00336EPSS
SaveExploits1References4Affected Software1
Citrix
Citrix
added 2023/09/04 12:0 a.m.11 views

How to backup NetScaler appliance via Command Line or GUI interface

This article describes how to backup NetScaler appliance via command line or GUI interface...

7.2AI score
SaveExploits0
Fedora
Fedora
added 2023/08/31 1:20 a.m.46 views

[SECURITY] Fedora 37 Update: ImageMagick-6.9.12.93-1.fc37

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

9.8CVSS7AI score0.08011EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2023/08/31 12:0 a.m.11 views

The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent allows a hacker to elevate their privileges to the root level.

The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent software relates to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

7.8CVSS7.2AI score0.00409EPSS
SaveExploits2References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:0 a.m.36 views

FreeBSD : py-httpie -- exposure of sensitive information vulnerabilities (1e37fa3e-5988-4991-808f-eae98047e2af)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1e37fa3e-5988-4991-808f-eae98047e2af advisory. - Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpi...

6.5CVSS5.4AI score0.0165EPSS
SaveExploits2References7
Kitploit
Kitploit
added 2023/08/30 12:30 p.m.63 views

Noir - An Attack Surface Detector Form Source Code

Noir is an attack surface detector form source code. Key Features Automatically identify language and framework from source code. Find API endpoints and web pages through code analysis. Load results quickly through interactions with proxy tools such as ZAP, Burpsuite, Caido and More Proxy tools...

7.6AI score
SaveExploits0References2
OSV
OSV
added 2023/08/29 8:15 p.m.9 views

CVE-2023-39267

An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service DoS condition in the switch...

6.5CVSS6.3AI score0.00683EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/29 7:28 p.m.9 views

CVE-2023-39267 Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface

An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service DoS condition in the switch...

6.6CVSS7.7AI score0.00683EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/29 7:28 p.m.22 views

CVE-2023-39267 Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface

An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service DoS condition in the switch...

6.6CVSS7.2AI score0.00683EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/29 6:15 p.m.8 views

CVE-2023-34039

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI...

9.8CVSS5.8AI score0.64194EPSS
SaveExploits9References3
BDU FSTEC
BDU FSTEC
added 2023/08/29 12:0 a.m.10 views

The vulnerability of the command-line interface (CLI) of D-Link DAP-2622 wireless access point’s software allows a hacker to gain increased privileges.

The vulnerability of the command-line interface CLI of D-Link DAP-2622 wireless access point’s microprogramming software relates to the possibility of using rigidly encoded credentials. Exploiting this vulnerability allows a malicious actor to enhance their privileges by bypassing the...

8.8CVSS7.6AI score0.00865EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/08/29 12:0 a.m.6 views

PT-2023-26857 · Aruba · Arubaos-Switch

Name of the Vulnerable Software and Affected Versions: ArubaOS-Switch affected versions not specified Description: An authenticated remote code execution issue exists in the command line interface of ArubaOS-Switch. Successful exploitation can result in a Denial-of-Service DoS condition in the...

6.6CVSS6.9AI score0.00683EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/08/29 12:0 a.m.9 views

VMware Aria Operations 加密问题漏洞

VMware Aria Operations is a unified, AI-powered, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware. Aria Operations for Networks has a security vulnerability that stems from a lack of unique cryptographic key generation, resulting in an...

9.8CVSS8.6AI score0.64194EPSS
SaveExploits9References7
OpenVAS
OpenVAS
added 2023/08/26 12:0 a.m.19 views

Fedora: Security Advisory for youtube-dl (FEDORA-2023-1f11546a48)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8.3AI score0.01038EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/08/25 1:29 a.m.46 views

[SECURITY] Fedora 38 Update: youtube-dl-2023.08.04.git86e3cf5-1.20230815git86e3cf5.fc38

Small command-line program to download videos from YouTube and other sites...

8.2CVSS7AI score0.01038EPSS
SaveExploits0
Fedora
Fedora
added 2023/08/25 12:43 a.m.41 views

[SECURITY] Fedora 37 Update: youtube-dl-2023.07.30.git2efc8de-1.20230815git2efc8de.fc37

Small command-line program to download videos from YouTube and other sites...

8.2CVSS7AI score0.01038EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2023/08/25 12:0 a.m.20 views

Fedora: Security Advisory for youtube-dl (FEDORA-2023-5435c10480)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS8.3AI score0.01038EPSS
SaveExploits0References2
Wordfence Blog
Wordfence Blog
added 2023/08/24 9:28 p.m.30 views

Introducing Wordfence CLI: A High Performance Malware Scanner Built for the Command Line

Today, we are incredibly excited to announce the launch of Wordfence CLI: an open source, high performance malware scanner built for the command-line. With Wordfence CLI you can detect malware and other indicators of compromise on a host system by running an extremely fast scanner that is at home...

6.7AI score
SaveExploits0
Citrix
Citrix
added 2023/08/24 12:0 a.m.12 views

How to disconnect, logoff, or reconnect session via command line

This article is designed to describehow to disconnect, logoff or reconnect session via command line...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2023/08/23 12:0 a.m.10 views

Cisco FXOS Software 安全漏洞

Cisco FXOS Software is a suite of firewall software from Cisco that runs in Cisco security appliances. A security vulnerability exists in Cisco FXOS Software that stems from a failure to validate the parameters of a CLI command, resulting in an arbitrary file write vulnerability. An attacker coul...

6CVSS6.4AI score0.0017EPSS
SaveExploits0References3
Rows per page
Query Builder