Panabit PAP-XM320 操作系统命令注入漏洞

Panabit PAP-XM320 is an enterprise-level Internet behavior management and traffic control gateway device developed by Panabit Corporation. Versions of Panabit PAP-XM320 prior to v7.7 contain a vulnerability related to operating system command injection. This vulnerability arises from the...

PT-2026-41950

Name of the Vulnerable Software and Affected Versions Panabit PAP-XM320 versions prior to 7.8 Description A command injection issue exists in the CGI component of the software. Authenticated users can execute arbitrary shell commands with root privileges through the '/cgi-bin/tools/ajax cmd'...

PT-2026-41951

Name of the Vulnerable Software and Affected Versions Panabit PAP-XM320 versions prior to 7.8 Description An authentication bypass exists in the embedded HTTP server. The server validates session cookies by performing a filesystem existence check based on a user-controlled cookie value. Due to a...

CVE-2026-36829

An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem existence check based on a user-controlled cookie value without proper sanitization, allowing directory traversal and...

Malicious Package

Overview pap-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

EUVD-2014-6266

Malware in sbrugna...

synacktiv-rules

synacktiv-rules Public repository of Sigma and YARA/YARA-X ru...

MAL-2024-11062 Malicious code in pap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4edb2994647fd7463cbdc117574cc9d7b34a7c03f581ceadeabf96b60cc791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pap-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4edb2994647fd7463cbdc117574cc9d7b34a7c03f581ceadeabf96b60cc791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pap-rn-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d93d68f0c91cc33781ef291ad6e9060b27ee9050d4e4c6c4f7e5348eabef3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10765 Malicious code in pap-rn-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d93d68f0c91cc33781ef291ad6e9060b27ee9050d4e4c6c4f7e5348eabef3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Updated freeradius packages fix security vulnerability

This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...

MGASA-2024-0264 Updated freeradius packages fix security vulnerability

This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...

Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool

Palo Alto Networks has released security updates to address five security flaws impacting its products, including a critical bug that could lead to an authentication bypass. Cataloged as CVE-2024-5910 CVSS score: 9.3, the vulnerability has been described as a case of missing authentication in its...

PAN-OS: CHAP and PAP When Used with RADIUS Authentication Lead to Privilege Escalation

This vulnerability allows an attacker performing a meddler-in-the-middle attack between Palo Alto Networks PAN-OS firewall and a RADIUS server to bypass authentication and escalate privileges to ‘superuser’ when RADIUS authentication is in use and either CHAP or PAP is selected in the RADIUS serv...

Malicious code in pap-events (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2835 Malicious code in pap-events (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2834 Malicious code in pap-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aedde58db0099dc4a2595977fd29ec7682a84f55c56bee218753a6a340a6b2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pap-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aedde58db0099dc4a2595977fd29ec7682a84f55c56bee218753a6a340a6b2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2014-2015

Stack-based buffer overflow in the normify function in the rlmpap module modules/rlmpap/rlmpap.c in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service crash and possibly execute arbitrary code via a long password has...