1215 matches found
PT-2021-9155 · Invigo · Invigo Automatic Device Management
Name of the Vulnerable Software and Affected Versions: Invigo Automatic Device Management ADM versions through 5.0 Description: A command injection issue in the /admin/broadcast.php script allows remote authenticated attackers to execute arbitrary PHP code on the server as the user running the...
Invigo Automatic Device Management 命令注入漏洞
Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A command injection vulnerability exists in /admin/broadcast.php in Invigo Automat...
Invigo Automatic Device Management SQL注入漏洞
Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A SQL injection vulnerability exists in /admin/displayerrors.php in Invigo Automat...
Invigo Automatic Device Management 路径遍历漏洞
Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A directory traversal vulnerability exists in /admin/sysmon.php in Invigo Automati...
PT-2024-11135 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns resource leaks in the error path of the venus probe function. If an error occurs after a successful of icc get call, it must be undone to prevent leaks. Using devm o...
New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild
Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...
VulnCheck KEV: CVE-2021-27561
Yealink Device Management contains a server-side request forgery SSRF vulnerability that allows for unauthenticated remote code execution...
CVE-2021-24084
Windows Mobile Device Management Information Disclosure Vulnerability...
CVE-2021-24084
Windows Mobile Device Management Information Disclosure Vulnerability...
Information disclosure
Windows Mobile Device Management Information Disclosure Vulnerability...
CVE-2021-24084
Windows Mobile Device Management Information Disclosure Vulnerability...
CVE-2021-24084 Windows Mobile Device Management Information Disclosure Vulnerability
...
CVE-2021-24084
CVE-2021-24084 is an information disclosure issue in Windows Mobile Device Management. Public docs identify it as a Windows MDM component vulnerability that could lead to confidentiality loss (CVSS v3.1 base score 5.5, HIGH confidentiality impact; LOCAL, LOW complexity; user interaction NONE). Mi...
Yealink Device Management Platform Unauthorized RCE Vulnerability (CNVD-2021-14827)
Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in Yealink Device Management Platform can be exploited to execute arbitrary commands...
Yealink Device Management Platform Unauthorized RCE Vulnerability
Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in the Yealink Device Management Platform can be exploited to execute arbitrary commands...
The vulnerability of Windows Mobile Device Management for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Windows Mobile Device Management for Windows operating systems lies in the lack of protection for mission-critical data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
PT-2021-5058
Name of the Vulnerable Software and Affected Versions Yealink Device Management version 3.6.0.20 Description The issue is related to a lack of input data sanitization in the Yealink Device Management platform, allowing a remote attacker to execute arbitrary commands as the root user. Specifically...
Microsoft Windows Device Management Enrollment Service Directory Junction Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
Advantech iView SQL Injection Vulnerability (CNVD-2021-13243)
Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in versions prior to Advantech iView 5.7.03.6112. An attacker can exploit this vulnerability to disclose information...
