Exploit for CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabas...

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

VMware has released security updates to address a critical flaw in the vCenter Server that could result in remote code execution on affected systems. The issue, tracked as CVE-2023-34048 CVSS score: 9.8, has been described as an out-of-bounds write vulnerability in the implementation of the DCE/R...

CVE-2023-46417

The advisory set indicates a remote command execution vulnerability in TOTOLINK X6000R (v9.4.0cu.652_B20230116) that is triggered through the sub_415498 function. The root cause is a flaw in that function, allowing an attacker to execute commands remotely with high impact on confidentiality, inte...

CVE-2023-46421

CVE-2023-46421 affects TOTOLINK X6000R, version 9.4.0cu.652_B20230116, with a remote command execution (RCE) vulnerability in the routine at the sub_411D00 function. The available sources describe an RCE impact with high/critical potential (per CVSS metrics in the record) but do not provide rollb...

CVE-2023-46419

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415730 function...

CVE-2023-46414

Summary (CVE-2023-46414) TOTOLINK X6000R firmware 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability that is triggered through the sub_41D494 function. The vulnerability’s root cause and impact are described across multiple sources; the CVSS metrics indicate a cri...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

CVE-2023-46424

TOTOLINK X6000R v9.4.0cu.652_B20230116 is affected by a remote command execution vulnerability in the sub_422BD4 function. The CVE entry documents RCE with high/critical impact (NVD CVSS3.1 vectors: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8; alternative CNA vector: AV:A/AC:L/PR:N/UI:N/S...

Mirth Connect Deserialization RCE

A vulnerability exists within Mirth Connect due to its mishandling of deserialized data. This vulnerability can be leveraged by an attacker using a crafted HTTP request to execute OS commands within the context of the target application. The original vulnerability was identified by IHTeam and...

CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415498 function...

CVE-2023-46421

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411D00 function...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

CVE-2023-46416

TOTOLINK X6000R firmware version 9.4.0cu.652_B20230116 is affected by a remote command execution (RCE) vulnerability via the sub_41A414 function. Multiple sources document an RCE impact with high/critical severity, enabling an attacker to execute commands remotely without authentication. The exac...

CVE-2023-46419

CVE-2023-46419 affects TOTOLINK X6000R with firmware 9.4.0cu.652_B20230116. The issue is a remote command execution via the sub_415730 function. Root cause per the documents is a vulnerability in that function, enabling network-exposed RCE with no user interaction and affecting confidentiality, i...

CVE-2023-46418

TOTOLINK X6000R is affected (version 9.4.0cu.652_B20230116). The vulnerability is a remote code execution via the sub_412688 function. Root cause: an issue in the sub_412688 routine allows an attacker to execute commands remotely. Impact is described as high/critical (per CVE records). There is n...

CVE-2023-46424

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub422BD4 function...

CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652_B20230116 is affected by a remote code execution vulnerability in the sub_41590C function. The issue enables an attacker to execute arbitrary commands remotely (RCE). Impact is reported as high/critical across confidentiality, integrity, and availability. The vulnerab...

CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...

CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...

CVE-2023-46423

Summary: CVE-2023-46423 affects TOTOLINK X6000R devices, specifically version 9.4.0cu.652_B20230116, with a remote command execution vulnerability exposed via the sub_417094 function. The NVD entry rates the impact as high to critical (CVSSv3.1: base 9.8, network attack vector, no user interactio...