CVE-2020-5958: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file, which may lead to code execution, denial of service, or information disclosure...

CVE-2019-9859

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2019-9859

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

Design/Logic Flaw

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2019-9859

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2019-9859

CVE-2019-9859 affects Vesta Control Panel (VestaCP) versions 0.9.7 through 0.9.8-23. An authenticated attacker can trigger command execution via PHP that may escalate to remote root access. The vulnerability stems from how VestaCP uses the PHP function exec to run shell scripts and how escapeshel...

PT-2020-11366

Name of the Vulnerable Software and Affected Versions Vesta Control Panel VestaCP versions 0.9.7 through 0.9.8-23 Description The issue concerns an authenticated command execution that can result in remote root access on the server. VestaCP uses PHP as the frontend language and shell scripts to...

CVE-2019-9859: Improper Neutralization of Special Elements used in an OS Command

Vesta Control Panel VestaCP 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

CVE-2020-5957

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

PT-2020-18849

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver, all versions Description The issue concerns a vulnerability in the NVIDIA Control Panel component. An attacker with local system access can corrupt a system file, potentially leading to denial of service or...

CVE-2020-5957: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can corrupt a system file, which may lead to denial of service or escalation of privileges...

Exchange Control Panel Viewstate Deserialization

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'bindata' class MetasploitModule 'Exchange Control Panel Viewstate Deserialization', 'Description' = %q This module exploits a .NET serialization vulnerability i...

PT-2020-22881

Уязвимость панели управления NVIDIA Control Panel драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с ошибками проверки пути загружаемых динамических библиотек. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2020-5526

Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel affected versions not specified Description: The issue is related to errors in path checking for dynamically loaded libraries in the NVIDIA Control Panel driver for NVIDIA GeForce, Quadro, NVS, and Tesla graphics processo...

PT-2020-5535

Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel affected versions not specified Description: The issue is related to insufficient access control in the NVIDIA Control Panel for NVIDIA GeForce, Quadro, NVS, and Tesla graphics processing unit drivers on Windows operating...

PT-2020-22883

Уязвимость панели управления NVIDIA Control Panel драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои...

Microsoft Exchange Server Exchange Control Panel Fixed Cryptographic Key Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the Exchange Control Panel web application. The product fails to generate a unique...

Exchange Control Panel ViewState Deserialization

This module exploits a .NET serialization vulnerability in the Exchange Control Panel ECP web page. The vulnerability is due to Microsoft Exchange Server not randomizing the keys on a per-installation basis resulting in them using the same validationKey and decryptionKey values. With knowledge of...