69 matches found
CVE-2023-29929
CVE-2023-29929: Kemp LoadMaster의 DNS 패킷을 통한 원격 "인스타킬" DoS Kemp LoadMaster 장치펌웨어 7.2.60 미만는 libkemplink.so 라이브러리의 isreverse 및 locatefqdn 메서드에서 심각한 버퍼 오버플로 취약점을 앓고 있습니다. 이 취약점은 DNS 이름을 위해 할당된 256바이트 버퍼가 너무 작아서 발생하며, 특수 문자나 유니코드 문자가 포함된 특수하게 조작된 DNS 요청을 전송함으로써 악용될 수 있습니다. 성공적인 악용은 즉각적인 크래시 및 서비스 거부D...
CVE-2024-1212
CVE-2024-1212 - Progress Kemp LoadMaster 비인증 명령 주입 CVE-2024-1212 를 위한 익스플로잇 스크립트로, Progress Kemp LoadMaster 의 비인증 명령 주입 취약점 입니다. 취약점 요약 CVE-2024-1212 는 Progress Kemp LoadMaster 에 영향을 미치며, 인증되지 않은 공격자 가 /access/set 엔드포인트에 조작된 HTTP 요청을 전송하여 시스템에서 임의의 명령을 실행할 수 있게 합니다. 기능 비인증 원격 코드 실행 RCE 기본 탐지를 피하기...
CVE-2024-7591-PoC
CVE-2024-7591-PoC 이 PoC 파이썬 스크립트는 Kemp LoadMaster의 원격 코드 실행 취약점을 테스트합니다. 이 도구는 테스트 목적으로만 사용해야 합니다. 이 스크립트는 이 취약점의 세부 사항에 관한 Marius Walter의 글을 기반으로 작성되었습니다. 해당 게시물은 다음에서 확인할 수 있습니다:...
Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the escapequotes function. The issue results from the lack of proper...
The vulnerability of the load balancer Progress Kemp LoadMaster, related to the failure to perform data cleaning at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of the load balancing device Progress Kemp LoadMaster lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the enablexroot API endpoint. The issue results from the use of a hard-coded...
Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the access API endpoint. The issue results from the lack of authorization pri...
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire's Threat Response Unit TRU. The Canadian cybersecurity company said it identified exploitation attempts targeting CVE-2026-8037 CVSS score:...
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037 , carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run...
Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the dodelapikey method. The issue results from the lack of proper...
Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the apiuser parameter provided to the accessv2 endpoin...
Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the dolistapikeys method. The issue results from the lack of proper...
Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within handling of the customLocation parameter. The issue results from the lack ...
Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the key parameter. The issue results from the lack of prop...
Progress Software Kemp LoadMaster addapikey Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the addapikey command. The...
Progress Software Kemp LoadMaster delcert Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the delcert command. The iss...
Progress Software Kemp LoadMaster getcipherset Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the getcipherset command. Th...
Progress Software Kemp LoadMaster delapikey OS Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of user data passed to the delapikey command. The issue resul...
