CVE-2024-20371

A vulnerability in the access control list ACL programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly...

Cisco Nexus 3500 Series Switches 权限许可和访问控制问题漏洞

Cisco Nexus 3500 Series Switches is a 3500 series switch from Cisco USA. The Cisco Nexus 3500 Series Switches are vulnerable to a privilege-granting and access-control issue, which arises from an ACL denial rule that is not properly enforced when the device is rebooted. An unauthenticated, remote...

PT-2024-8206 · Cisco · Cisco Nexus 3550-F Switches

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3550-F Switches affected versions not specified Description: A vulnerability in the access control list ACL programming could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management...

AZL-52601 CVE-2024-50098 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEVOFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting. SDEVQUIESCE was set for all LU's scsidevices by UFS shutdown, and at that time the audio...

DEBIAN-CVE-2024-50098

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEVOFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting. SDEVQUIESCE was set for all LU's scsidevices by UFS shutdown, and at that time the audio...

CVE-2024-50098

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEVOFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting. SDEVQUIESCE was set for all LU's scsidevices by UFS shutdown, and at that time the audio...

UBUNTU-CVE-2024-50098

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEVOFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting. SDEVQUIESCE was set for all LU's scsidevices by UFS shutdown, and at that time the audio...

CVE-2024-50098 scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Set SDEVOFFLINE when UFS is shut down There is a history of deadlock if reboot is performed at the beginning of booting. SDEVQUIESCE was set for all LU's scsidevices by UFS shutdown, and at that time the audio...

CVE-2023-29115 Denial of Service via Web Management interface in Enel X JuiceBox

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

CVE-2023-29115: Improper Access Control

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service e.g. reboot...

PT-2024-35579

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the Linux kernel, specifically with x86/CPU/AMD, where certain Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE instructions. However, using the...

PT-2024-12195 · Enel X · Waybox Enel X Web Management Application

Name of the Vulnerable Software and Affected Versions: Waybox Enel X Web management application affected versions not specified Description: The issue concerns a denial-of-service condition in the Waybox Enel X Web management application, where a specific request could cause the system to reboot...

CVE-2024-51249

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...

CVE-2024-51249

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...

CVE-2024-51249

The DrayTek Vigor3900 (version 1.5.1.3 ) is vulnerable to a command injection flaw in mainfunction.cgi . Attackers can inject malicious commands and execute them by invoking the reboot function, potentially leading to remote reboot or other unauthorized actions. To mitigate this risk, it is recom...

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to inject malicious commands into mainfunction.cgi and execute arbitrary commands by...

PT-2024-34573 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function. This enables remote reboot and potentially other...

CVE-2024-51249: Improper Neutralization of Special Elements used in an OS Command

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...

Linux Reboot

A very small shellcode for rebooting the system using the reboot syscall. This payload is sometimes helpful for testing purposes. Requires CAPSYSBOOT privileges. Module Options msf use payload/linux/riscv32le/reboot msf payloadreboot show actions ...actions... msf payloadreboot set ACTION msf...

Linux Reboot

A very small shellcode for rebooting the system using the reboot syscall. This payload is sometimes helpful for testing purposes. Requires CAPSYSBOOT privileges. Module Options msf use payload/linux/riscv64le/reboot msf payloadreboot show actions ...actions... msf payloadreboot set ACTION msf...