EUVD-2020-23434

Malware in sbrugna...

EUVD-2020-23435

Malware in sbrugna...

EUVD-2020-23436

Malware in sbrugna...

EUVD-2020-23444

Malware in sbrugna...

EUVD-2020-23452

Malware in sbrugna...

CVE-2020-35780

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35779

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35797

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker...

CVE-2020-35781

NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service...

CVE-2020-35789

NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user...

NETGEAR ProSafe Network Management System 300 Authenticated File Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NETGEAR ProSafe Network Management System 300 Authenticated File Download', 'Description' = %q Netgear's ProSafe NMS300 is a network management...

ProSAFE Network Management System getFilterString Code Execution

The vulnerability of the getFilterString method in the ProSAFE Network Management System NMS300 microprogramming device lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Tomcat Code Execution

The vulnerability of the Tomcat microprogramming software used in Netgear ProSafe NMS300 devices is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

Netgear ProSafe NMS300 Privilege Escalation

The vulnerability of Netgear ProSafe NMS300 network device software relates to the use of default login credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...

UpLoadServlet Component Code Execution

The vulnerability of the UpLoadServlet component in the ProSAFE Network Management System NMS300 involves unlimited uploading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ProSAFE Network Management System Access Control Privilege Escalation

The vulnerability of the ProSAFE Network Management System NMS300 in terms of system management, diagnosis, and optimization of network device operations is related to deficiencies in access control due to incorrect context determination for searching user credentials. Exploiting this vulnerabili...

Metasploit Weekly Wrap-Up

Pumpkin Spice Modules Here in the northern hemisphere, fall is on the way: leaves changing, the air growing crisp and cool, and some hackers changing the flavor of their caffeine. This release features a new exploit module targeting Apache NiFi as well as a new and improved library to interact wi...

ProSafe Network Management Privilege Escalation

The vulnerability of the createUser function in the ProSafe Network Management NMS300 system, a device for managing, diagnosing, and optimizing network devices, lies in buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain increased privileges remotely...

SettingConfigController Class Code Execution

The vulnerability of the SettingConfigController class in the system for managing, diagnosing, and optimizing the operation of network devices is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM...

Netgear ProSAFE Network Management System Arbitrary File Upload (CVE-2021-27274)

An unrestricted file upload vulnerability exists in Netgear ProSAFE NMS300. The vulnerability is due to improper validation of the uploaded file in the MFileUploadController class...