Remote code execution

The SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution...

Remote code execution

The SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution...

Remote code execution

SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution...

Remote code execution

SolarWinds Access Rights Manager ARM was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution...

CVE-2023-6123

The CVE-2023-6123 occurs in OpenText ALM Octane 16.2.100 and later, due to an improper neutralization vulnerability. This design flaw could allow remote code execution, as indicated by multiple sources. The description confirms the affected product and version range and the underlying issue, but ...

CVE-2024-0622

OpenText Operations Agent on non-Windows platforms (versions 12.15 and 12.20–12.25) contains a local privilege escalation vulnerability. Several sources corroborate the affected product and impact, noting the issue enables elevation of privileges locally. The core root cause is not explicitly des...

MTN Group: CVE-2010-1429 JBoss Insecure Storage of Sensitive Information on ips.mtn.co.ug

The JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 allowed remote attackers to obtain sensitive information about deployed web contexts via a request to the status servlet, as demonstrated by a full=true query string. This issue was caused by a regression fr...

CVE-2023-40057

The vulnerability CVE-2023-40057 affects SolarWinds Access Rights Manager (ARM). Multiple connected sources describe a deserialization-based flaw that enables remote code execution when exploited by an authenticated user who abuses a SolarWinds service. The threat hinges on a Remote Code Executio...

CVE-2024-23477

CVE-2024-23477 affects SolarWinds Access Rights Manager (ARM). The vulnerability is a Directory Traversal that enables unauthenticated remote code execution. Details across sources indicate exposed components (openServerFileStream) and that exploitability does not have published fix/version infor...

CVE-2024-23476

CVE-2024-23476 refers to a Directory Traversal Remote Code Execution vulnerability in SolarWinds Access Rights Manager (ARM). The accessible documents describe an unauthenticated path-traversal flaw that can lead to remote code execution with high impact (CVE metrics show a CRITICAL base score, 9...

CVE-2024-23478

CVE-2024-23478 affects SolarWinds Access Rights Manager (ARM). The connected advisories describe a deserialization/JsonSerializationBinder flaw that can allow an attacker to trigger remote code execution in ARM installations. The ZDI advisory specifies that authentication is required and attribut...

CVE-2024-23479

SolarWinds ARM is affected by CVE-2024-23479: a Directory Traversal Remote Code Execution vulnerability. The issue allows an unauthenticated attacker to achieve remote code execution via directory traversal in ARM. The vulnerability affects SolarWinds Access Rights Manager; however, the provided ...

CVE-2024-0240

CVE-2024-0240 describes a memory leak in Silicon Labs’ Bluetooth stack for EFR32 products that can exhaust memory when sending notifications to multiple clients, causing all Bluetooth operations (advertising, scanning) to stop. Affected component is the Silicon Labs Bluetooth stack for EFR32; roo...

Directory traversal

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the downloadbackup.php component...

Privilege escalation

Improper Privilege Management vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users.This issue affects SoliPay Mobile App: before 5.0.8...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in POSTAHSIL Online Payment System allows SQL Injection.This issue affects Online Payment System: before 14.02.2024...

Hardcoded credentials

Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable.This issue affects SoliPay Mobile App: before 5.0.8...

CVE-2023-6255

CVE-2023-6255 affects Utarit Information Technologies SoliPay Mobile App (pre-5.0.8). The root cause is hard-coded credentials embedded in the mobile app, enabling reading of sensitive strings within the executable. Impact, per sources, is confidentiality-related (readability of sensitive data); ...

CVE-2023-5155

Summary : CVE-2023-5155 is an SQL Injection in Utarit Information Technologies’ SoliPay Mobile App (versions before 5.0.8). The root cause is improper neutralization of special elements in SQL commands, allowing an attacker to inject payloads. The vulnerability affects SoliPay Mobile App prior to...

CVE-2023-4993

CVE-2023-4993 affects SoliPay Mobile App (Utarit Information Technologies) before version 5.0.8. The issue is described as Incorrect Use of Privileged APIs / Improper Privilege Management, enabling collection of data provided by users. The CVE’s metrics indicate a high base score (CVSS 3.1: 7.5, ...