139 matches found
CVE-2019-10267
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the...
Malicious code in keccak-crypto (npm)
This package is a starjacking attack which bundles a cryptostealing payload. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded491472e4703368974a54f37663b29332b6a969e3e8fa8ccefec26d5b4c8a0 Any computer that has this package installed or running should be considered...
CVE-2020-11847
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...
CVE-2020-11847
CVE-2020-11847 affects OpenText NetIQ Privileged Account Manager (PAM) prior to 3.7.0.1. An SSH-authenticated user can access the PAM server and run an OS command via bash to obtain full system access. The root cause is exposure of command execution during SSH access to the PAM server, as describ...
CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...
CVE-2020-11847: Improper Neutralization of Special Elements used in an OS Command
SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...
PT-2024-27529
Name of the Vulnerable Software and Affected Versions Electrolink transmitters affected versions not specified Description The issue concerns an authentication bypass affecting the login cookie. An attacker can set an arbitrary value, except 'NO', to the login cookie and gain full system access...
Electrolink FM/DAB/TV Transmitter 安全漏洞
The Electrolink FM/DAB/TV Transmitter is a series of transmitters from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter that stems from the presence of an authentication bypass vulnerability. An attacker can set any value other than NO to a login cookie and ha...
Nice Linear eMerge E3-Series
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Nice Equipment : Linear eMerge E3-Series Vulnerabilities : Path traversal, Cross-site scripting, OS command injection, Unrestricted Upload of File with...
CVE-2023-6930
EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...
CVE-2023-6930
EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...
Authentication flaw
EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...
CVE-2023-3767
An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...
EasyPHP Webserver OS Command Injection Vulnerability
EasyPHP Webserver is an EasyPHP open source platform that allows you to build a development environment. EasyPHP Webserver version 14.1 suffers from an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability. An attacker...
EuroTel ETL3100 Transmitter Information Disclosure Vulnerability
The EuroTel ETL3100 TV and FM transmitters suffer from an unauthenticated configuration and log download vulnerability. This will enable the attacker to disclose sensitive information and help him in authentication bypass, privilege escalation and full system access. EuroTel ETL3100 Transmitter...
EuroTel ETL3100 Transmitter Unauthenticated Config/Log Download Vulnerability
Summary RF Technology For Television Broadcasting Applications. The Series ETL3100 Radio Transmitter provides all the necessary features defined by the FM and DAB standards. Two bands are provided to easily complain with analog and digital DAB standard. The Series ETL3100 Television Transmitter...
NETGEAR RAX30 Router Use Encrypted Login Full Access
The vulnerability of NETGEAR RAX30 router microprogramming software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the system...
CVE-2023-31763
Weak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...
