PT-2024-12613 · Ibm · Ibm Aspera Orchestrator

Name of the Vulnerable Software and Affected Versions: IBM Aspera Orchestrator version 4.0.1 Description: The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Recommendations: For IBM Aspera Orchestrator version 4.0.1...

CVE-2024-25458

An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera circuit board identifier A9-48B-V1.0 firmware v.CYCAM48BBC01v870903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port...

CVE-2024-20376

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

CVE-2024-20376

A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a DoS condition. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

CVE-2024-24978

Denial-of-service DoS vulnerability exists in TvRock 0.9t8a. Receiving a specially crafted request by a remote attacker or having a user of TvRock click a specially crafted request may lead to ABEND abnormal end. Note that the developer was unreachable, therefore, users should consider stop using...

CVE-2024-24978

TvRock 0.9t8a has a DoS vulnerability that can trigger an ABEND via a specially crafted request, with exploitation possible by remote attackers or by users clicking the crafted request. The developer is unreachable, and multiple sources advise stopping use of TvRock 0.9t8a. No public patch or mit...

CVE-2024-25458

An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera circuit board identifier A9-48B-V1.0 firmware v.CYCAM48BBC01v870903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port...

CYCZCAM A9 Camera 安全漏洞

CYCZCAM A9 Camera is a camera from CYCZCAM. A security vulnerability exists in the CYCZCAM A9 Camera that originates from allowing a remote attacker to obtain sensitive information by sending a crafted request to a UDP port...

CVE-2024-33383

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter...

CVE-2024-31801

Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2024-0840 Grandstream UCM Series IP PBX HTTP Parameter Injection

The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a default user and...

CVE-2024-31801

CVE-2024-31801 affects NEXSYS-ONE prior to Rev.15320. It is a directory traversal vulnerability allowing a remote attacker to obtain sensitive information via a crafted request. Root cause: improper handling of file paths in NEXSYS-ONE before Rev.15320. Impact: confidentiality loss of sensitive d...

CVE-2024-31801

Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2024-31801

Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive information via a crafted request...

Grandstream UCM Series IP PBX 安全漏洞

The Grandstream UCM Series is a series of IP PBX devices from Grandstream. A security vulnerability exists in the Grandstream UCM Series IP PBX prior to firmware version 1.0.20.52, which originates from a vulnerability that allows an authenticated remote attacker to execute arbitrary code by...

ASUS RT-N12 安全漏洞

The ASUS RT-N12+ B1 is a wireless router. An elevation of privilege vulnerability exists in the ASUS RT-N12+ B1, which can be exploited by an attacker to bypass security restrictions caused by incorrect access control and gain root terminal access via the UART interface by sending a specially...

The vulnerability of the mac2name function in the web interface of the work time and bandwidth management system, Peplink Smart Reader, allows a violator to execute arbitrary code.

The vulnerability of the mac2name function in the web interface of the work time and bandwidth management system Peplink Smart Reader exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacke...

aiohttp: CRLF injection if user controls the HTTP method using aiohttp client

A flaw was found in Aiohttp. This issue may allow an attacker to send a crafted HTTP request to the server and smuggle arbitrary HTTP headers due to improper validation of HTTP requests during the processing of the HTTP request method. By exploiting this flaw, an attacker can manipulate HTTP...

TvRock 安全漏洞

TvRock is a tool for setting timer recordings for TV programs from TvRock, Inc. A security vulnerability exists in TvRock version 0.9t8a, which stems from the presence of a Denial of Service DoS vulnerability, where a remote attacker with a specially crafted request could cause an abnormal end...

Ruijie Networks RG-RSR10-01G-T 安全漏洞

Ruijie Networks RG-RSR10-01G-T is a wireless router from Ruijie Networks China. A security vulnerability exists in the Ruijie Networks RG-RSR10-01G-T. An attacker could exploit the vulnerability to execute arbitrary code via a specially crafted HTTP request...