Command Execution Vulnerability in Pan-Asia Classroom

Pan-Asia Classroom is an online classroom software. A command execution vulnerability exists in Pantheon Classroom, which can be exploited by an attacker to execute arbitrary commands...

pan-pan.co Cross Site Scripting vulnerability OBB-3206031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2003-0855

Pan 0.13.3 and earlier allows remote attackers to cause a denial of service crash via a news post with a long author email address...

SUSE CVE-2008-2363

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...

CVE-2023-22375

The CVE-2023-22375 issue affects the PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G (all versions). It is a Cross-site Request Forgery (CSRF) vulnerability that could allow a remote unauthenticated attacker to hijack a logged-in user’s session and perform arbitrary operations by tric...

CVE-2023-22375

Cross-site request forgery CSRF vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user to view a malicious page. NOTE: This vulnerability...

Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G 跨站脚本漏洞

PLANEX Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G is a camera from PLANEX. A security vulnerability exists in the Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G. An attacker can exploit this vulnerability to inject arbitrary scripts...

CVE-2022-0030

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions...

CVE-2022-0030

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions...

Authentication flaw

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions...

CVE-2022-0030

Summary of CVE-2022-0030 (PAN-OS) Affected: Palo Alto Networks PAN-OS 8.1.x prior to 8.1.24 (web interface).Vulnerability: Authentication bypass allowing a network-based attacker with specific knowledge of the target firewall or Panorama to impersonate an existing PAN-OS administrator and perform...

CVE-2022-0030 PAN-OS: Authentication Bypass in Web Interface

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions...

CVE-2022-0030 PAN-OS: Authentication Bypass in Web Interface

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions...

PAN-OS: Authentication Bypass in Web Interface

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions. Work around: Customers wit...

PT-2022-5103 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS versions prior to 8.1.24 Description: The issue is related to an authentication bypass vulnerability in the web interface of PAN-OS, which allows a network-based attacker with specific knowledge of the target firewall or Panorama...

Palo Alto Networks PAN-OS 8.1.x < 8.1.24 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.24. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the...

Palo Alto Networks Authenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Palo Alto Networks Authenticated Remote Code Execution', 'Description' = %q An OS Command Injection vulnerability in the PAN-OS management...

Palo Alto Networks Authenticated Remote Code Execution

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS versions use exploit/linux/http/panosopcmdexec msf exploitpanosopcmdexec show targets ...targets... ms...

Informational: PAN-OS: Impact of the NVIDIA Dataplane Development Kit (DPDK) Vulnerability CVE-2022-28199

The Palo Alto Networks Product Security Assurance team evaluated the NVIDIA Dataplane Development Kit DPDK vulnerability CVE-2022-28199 as it relates to our products. This vulnerability causes networking stacks that use the NVIDIA distribution of the DPDK to enter an unrecoverable state when...

The Bug Report – August 2022 Edition

The Bug Report — August 2022 Edition By Philippe Laulheret · September 7, 2022 Your Cybersecurity Comic Relief Figure 0: CVE-2022-38392 redefines “destructive interference” Why am I here? Indeed, why are we here? School is back in session, there’s a chill in the air that says fall is around the...