Altenergy Power Control Software C1.2.5 - OS command injection

Exploit Title: Altenergy Power Control Software C1.2.5 - OS command injection Google Dork: intitle:"Altenergy Power Control Software" Date: 15/3/2023 Exploit Author: Ahmed Alroky Vendor Homepage: https://apsystems.com/ Version: C1.2.5 Tested on: Windows 10 CVE : CVE-2023-28343 import requests...

CVE-2023-28051

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system...

CVE-2023-28051

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system...

Improper access control

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system...

CVE-2023-28051

Dell Power Manager is affected by CVE-2023-28051 in versions 3.10 and earlier, due to an Improper Access Control vulnerability that could let a low-privilege attacker elevate privileges locally. The NVD/CV sources list a base CVSS v3.1 score of 7.8 (High) with impact to confidentiality, integrity...

CVE-2023-28051

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system...

CVE-2023-28051

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system...

CVE-2023-28051: Improper Access Control

Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system...

PT-2023-21515 · Dell · Dell Power Manager

Name of the Vulnerable Software and Affected Versions: Dell Power Manager versions 3.10 and prior Description: The issue is related to an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system...

Altenergy Power Control Software C1.2.5 - OS command injection

Exploit Title: Altenergy Power Control Software C1.2.5 - OS command injection Google Dork: intitle:"Altenergy Power Control Software" Exploit Author: Ahmed Alroky Vendor Homepage: https://apsystems.com/ Version: C1.2.5 Tested on: Windows 10 CVE : CVE-2023-28343 import requests import argparse def...

Dell Power Manager security vulnerabilities

Dell Power Manager is an application from Dell USA that is used to configure battery maintenance practices to maximize the battery life of your system. An Access Control Error vulnerability exists in Dell Power Manager 3.10 and prior versions, which stems from improper access control. An attacker...

CVE-2023-20688

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441821; Issue ID: ALPS07441821...

upower bug fix and enhancement update

An update is available for upower. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list UPower is a DBus daemon and a client library that provides an interface for...

Supply Chain Attacks and Critical Infrastructure: How CISA Helps Secure a Nation's Crown Jewels

Critical infrastructure attacks are a preferred target for cyber criminals. Here's why and what's being done to protect them. What is Critical Infrastructure and Why is It Attacked? Critical infrastructure is the physical and digital assets, systems and networks that are vital to national securit...

CVE-2023-20688

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441821; Issue ID: ALPS07441821...

PT-2023-17553 · Power · Power

Name of the Vulnerable Software and Affected Versions: power affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction ...

CVE-2023-20688

CVE-2023-20688 describes an out-of-bounds read due to a missing bounds check in Power, potentially enabling local information disclosure with SYSTEM privileges; exploitation is LOCAL with no user interaction required, and a patch is identified as ALPS07441821 (Issue ALPS07441821). Several connect...

Dell PowerScale OneFS backend link vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A backlink vulnerability exists in Dell PowerScale OneFS that stems from incorrect link resolution in isigatherinfo, which can be exploited by an attacker to caus...

Linux kernel Power Management Unauthorized Access

The vulnerability of the Linux operating system’s kernel power management function relates to the use of hidden time channels for data transmission during the processing of model-specific registers MSRs. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

RCCMD Client-Server Code Execution

The vulnerability of the client-server application for managing power supply sources in RCCMD is related to the use of pre-installed credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain full control over the application...