EulerOS 2.0 SP10 : binutils (EulerOS-SA-2022-1481)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of character...

EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2022-1498)

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. CVE-2021-27097 - The boot loader in Das U-Boot before 2021.04-r...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-1463)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validatio...

CVE-2022-21421

CVE-2022-21421 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (BI EE), specifically the Analytics Web General component. Affected versions include 5.5.0.0.0, 5.9.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability permits an unauthenticated, network-accessible ...

EulerOS 2.0 SP9 : libarchive (EulerOS-SA-2022-1430)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a...

EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2022-1370)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A user can tell curl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgra...

EulerOS Virtualization 2.10.0 : nss (EulerOS-SA-2022-1407)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA o...

EulerOS 2.0 SP9 : systemd (EulerOS-SA-2022-1439)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested...

EulerOS Virtualization 2.10.1 : libsepol (EulerOS-SA-2022-1379)

According to the versions of the libsepol package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and...

Microsoft HTTP Protocol Stack Denial Of Service

!/usr/bin/env python3 -- coding: utf-8 -- Exploit developed by the polakow from the past @ltdominikow This exploit was made for testing own networks and patch affected systems. I'm not responsible if you do another thing with this exploit. As a drunk wise man said: "Please, don't be a 'culiao'!"...

CVE-2020-25160

CVE-2020-25160 involves improper access controls in B. Braun SpaceCom (versions L81/U61 and earlier), Battery Pack with Wi‑Fi (U61/L81 and earlier), and Data module compactplus (A10/A11). The root cause is improper access control that allows attackers to extract and tamper with the devices’ netwo...

CVE-2021-40422

CVE-2021-40422 affects the Swift Sensors Gateway SG3-1010: authentication bypass in the device password generation mechanism can enable remote code execution via specially crafted network requests. Public sources (Talos) confirm a hard-coded credential vulnerability (CWE-798) and remote SSH acces...

CVE-2022-22181 Junos OS: J-Web can be compromised through reflected XSS attacks

A reflected Cross-site Scripting XSS vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web. This may allow the attacker to gain control of...

Juniper Networks Junos OS 代码问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to a code issue that could allow an unauthenticated network-based...

Cisco IOS XE Software 操作系统命令注入漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. An operating system command injection vulnerability exists in Cisco IOS XE. Multiple...

Fedora: Security Advisory for nss (FEDORA-2022-3781e69ebd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-2242

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to the Remote Procedure Call Runtime in Microsoft Windows and is caused by incorrect code generation management. This allows a remote attacker to execute...

Valmet DNA

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable from an adjacent network /low attack complexity Vendor: Valmet Equipment: DNA Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute commands remotely...

CVE-2022-24829 Missing authentication in Garden

Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints did not require authentication. In some operating modes this allows for an attacker to gain access to the application erroneously. The configuration is leaked through the /api...

Razer Sila 2.0.418 Command Injection

Exploit Title: Razer Sila - Command Injection Google Dork: N/A Date: 4/9/2022 Exploit Author: Kevin Randall Vendor Homepage: https://www2.razer.com/ap-en/desktops-and-networking/razer-sila Software Link: https://www2.razer.com/ap-en/desktops-and-networking/razer-sila Version:...