EUVD-2020-23444

Malware in sbrugna...

EUVD-2020-23434

Malware in sbrugna...

EUVD-2020-23435

Malware in sbrugna...

EUVD-2020-23452

Malware in sbrugna...

EUVD-2020-23436

Malware in sbrugna...

CVE-2020-35780

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35779

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker...

CVE-2020-35781

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user...

NETGEAR ProSafe Network Management System 300 Authenticated File Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NETGEAR ProSafe Network Management System 300 Authenticated File Download', 'Description' = %q Netgear's ProSafe NMS300 is a network management...

Metasploit Weekly Wrap-Up

Pumpkin Spice Modules Here in the northern hemisphere, fall is on the way: leaves changing, the air growing crisp and cool, and some hackers changing the flavor of their caffeine. This release features a new exploit module targeting Apache NiFi as well as a new and improved library to interact wi...

Netgear ProSAFE Network Management System Arbitrary File Upload (CVE-2021-27274)

An unrestricted file upload vulnerability exists in Netgear ProSAFE NMS300. The vulnerability is due to improper validation of the uploaded file in the MFileUploadController class...

CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker...

CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker...

CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user...

CVE-2020-35780

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35781

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user...

CVE-2020-35781

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...