1220 matches found
agent_tesla_panel_rce
agentteslapanelrce This module exploit the command injection vulnerability in control center of the agent Tesla. Setup Resources for testing are available here: https://github.com/mekhalleh/agentteslapanelrce/tree/master/resources Windows For WebPanel1.7z unauthenticated RCE, I used WAMP server...
CVE-2024-27673
CVE-2024-27673 ASUS Control Center Express = 01.06.15 - Unquoted Service Path Description: ASUS Control Center Express Version = 01.06.15 contains an unquoted service path which allows attackers to escalate privileges to the system level. Assuming attackers have write access to C:, the attackers...
Vulnerabilities fixed in Barracuda Email Security Gateway
Barracuda has patched vulnerabilities in the Barracuda Email Security Gateway. Barracuda identified two vulnerabilities across various Barracuda products: one related to authorization bypass CVE-2026-116606 and another related to command injection CVE-2026-111560. The first vulnerability involves...
CVE-2021-3560-PolkitPrivilegeEsclation
CVE-2021-3560-Polkit-Privilege-Esclation PoC Original research by Kevin Backhouse This is just a Bash PoC script, that automates the exploitation steps mentioned in Kevin Backhouse's blog. Read his post on this vulnerability:...
CVE-2023-22855
CVE-2023-22855 This vulnerability was discovered and disclosed by Nico Viakowski and myself. This repository will hold the advisory and the exploit. This repository is only for educational purposes. Links Vendor Website: https://www.kardex.com/en/mlog-control-center Exploit on Exploit-DB:...
Security Bulletin: IBM Sterling Control Center is vulnerable to Guava Denial of Service (DoS) via Unthrottled Memory Allocation During Java Deserialization (CVE-2026-102554)
Summary A high-severity vulnerability in Google Guava versions 4.0 through 33.7.1 allows attackers to trigger a Denial of Service DoS through specially crafted Java serialized objects. This can cause excessive memory consumption, resulting in an OutOfMemoryError and application crash. The issue i...
Security Bulletin: IBM Sterling Control Center has denial-of-service vulnerabilities in FasterXML jackson-databind due to Uncontrolled Resource Consumption (CVE-2026-91776, CVE-2026-91777)
Summary Multiple high-severity vulnerabilities have been identified in FasterXML jackson-databind. CVE-2026-91776 is a memory exhaustion vulnerability caused by unbounded caching of attacker-supplied, unrecognized polymorphic type identifiers when name-based polymorphic deserialization with a...
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The vulnerabilities, a pre-authentication authorization bypass vulnerability and a comman...
Security Bulletin: IBM Sterling Control Center has denial-of-service vulnerabilities in FasterXML Jackson Core due to Uncontrolled Resource Consumption (CVE-2026-89407, CVE-2026-89425)
Summary Multiple high-severity vulnerabilities have been identified in FasterXML Jackson Core. CVE-2026-89407 may allow attackers to trigger excessive CPU consumption through specially crafted numeric inputs, resulting in a Denial-of-Service DoS condition. CVE-2026-89425 may lead to excessive...
Fedora 45 : at-spi2-core / gjs / gnome-calculator / gnome-control-center / etc (2026-2812a1754d)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-2812a1754d advisory. GNOME 51.1 released packages Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...
Apple MacOS: CVE-2026-112462: OS X update for Control Center
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to bypass Privacy preferences...
Security Bulletin: Spring Expression Language (SpEL) in IBM Sterling Control Center makes it vulnerable to Improper Control of Dynamically-Managed Code Resources (CVE-2026-59283)
Summary A Critical vulnerability in Spring Framework that allows a safety guard bypass when evaluating Spring Expression Language SpEL expressions using SimpleEvaluationContext with the expression compiler enabled, potentially leading to unauthorized actions or remote code execution; affected...
Security Bulletin: As an Spring MVC application, IBM Sterling Control Center is vulnerable to Improper Neutralization of CRLF Sequences (CVE-2026-59313)
Summary Spring MVC framework is used by IBM Sterling Control Center and as part of dependency one of them is in spring-webmvc-6.2.12.jar. Vulnerability Details CVEID:CVE-2026-59313 DESCRIPTION: Spring MVC applications using the functional web framework are vulnerable to stream corruption when usi...
Security Bulletin: As a Spring Framework applications, IBM Sterling Control Center is vulnerable to Uncontrolled Resource Consumption (CVE-2026-59282)
Summary Spring framework is used by IBM Sterling Control Center as part of dependency in spring-beans-6.2.12.jar. Vulnerability Details CVEID:CVE-2026-59282 DESCRIPTION: Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target...
Security Bulletin: As an Spring MVC application, IBM Sterling Control Center is vulnerable to Path Traversal, Open Redirect and CRLF Injection (CVE-2026-47884, CVE-2026-47887, CVE-2026-47890)
Summary Spring MVC framework is used by IBM Sterling Control Center and as part of dependency one of them is in spring-webmvc-6.2.12.jar. Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an...
Security Bulletin: Due to the use of Spring WebFlux, IBM Sterling Control Center is vulnerable to multiple CVEs (CVE-2026-47883, CVE-2026-47885, CVE-2026-47889, CVE-2026-47891 )
Summary Spring WebFlux is used by IBM Sterling Control Center and as part of dependency one of them is in spring-web-6.2.12.jar. Vulnerability Details CVEID:CVE-2026-47883 DESCRIPTION: UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The...
Security Bulletin: Due to the use of Spring Security's WebAuthn, IBM Sterling Control Center is vulnerable to Incorrect Authorization (CVE-2026-47841)
Summary Spring Security's WebAuthn is used by IBM Sterling Control Center as part of dependency in spring-security-web-6.4.12.jar. Vulnerability Details CVEID:CVE-2026-47841 DESCRIPTION: An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when usi...
Security Bulletin: Due to the use of Spring Expression Language (SpEL), IBM Sterling Control Center is vulnerable to Uncontrolled Resource Consumption (CVE-2026-47886)
Summary Spring Expression Language SpEL is used by IBM Sterling Control Center as part of dependency in spring-expression-6.2.12.jar. Vulnerability Details CVEID:CVE-2026-47886 DESCRIPTION: Applications that evaluate user-supplied Spring Expression Language SpEL expressions may be vulnerable to a...
Security Bulletin: Due to the use of Java SE, IBM Sterling Control Center is vulnerable to multiple CVEs (CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440)
Summary Java SE is used by IBM Sterling Control Center as part of dependency in IBM Semeru Runtime CSPU - Aug 2026 - Includes OpenJDK August 2026 CPU. Vulnerability Details CVEID:CVE-2026-70906 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via...
