VMware vCenter Server Analytics (CEIP) Service File Upload

This module exploits a file upload in VMware vCenter Server's analytics/telemetry CEIP service to write a system crontab and execute shell commands as the root user. Note that CEIP must be enabled for the target to be exploitable by this module. CEIP is enabled by default. Module Options msf use...

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Backdoor Account

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Hidden Backdoor Account Write Access Vendor: FatPipe Networks Inc. Product web page: https://www.fatpipeinc.com Affected version: WARP / IPVPN / MPVPN 10.2.2r38 10.2.2r25 10.2.2r10 10.1.2r60p82 10.1.2r60p71 10.1.2r60p65 10.1.2r60p58s1 10.1.2r60p58...

Siemens RUGGEDCOM ROX Information Disclosure Vulnerability

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

Siemens RUGGEDCOM ROX Elevation of Privilege Vulnerability

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

Unspecified Vulnerability in Siemens RUGGEDCOM ROX

RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...

September 14, 2021—KB5005565 (OS Builds 19041.1237, 19042.1237, and 19043.1237)

None None...

Security update 2021-09-14

...

Fighting the Rogue Toaster Army: Why Secure Coding in Embedded Systems is Our Defensive Edge

There are plenty of pop culture references to rogue AI and robots, and appliances turning on their human masters. It is the stuff of science fiction, fun, and fantasy, but with IoT and connected devices becoming more prevalent in our homes, we need more discussion around cybersecurity and safety...

August 26, 2021—KB5005103 (OS Build 18363.1766) Preview

None None...

August 10, 2021—KB5005031 (OS Build 18363.1734)

None None...

August 10, 2021—KB5005033 (OS Builds 19041.1165, 19042.1165, and 19043.1165)

None None...

KB5005260: Servicing stack update for Windows 10, version 2004, 20H2, and 21H1: August 10, 2021

None None...

August 10, 2021-KB5004331 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2, and Windows Version 21H1

None None...

August 10, 2021-KB5004330 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2

None None...

August 10, 2021-KB5004752 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

August 10, 2021-KB5004333 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1909

None None...

ZTE ZXCTN Authentication Bypass Vulnerability

ZTE ZXCTN is a packet transport product for the access layer of the bearer network of China ZTE ZTE. An authentication bypass vulnerability exists in ZTE ZXCTN 6120H version 5.10.00B24. The vulnerability is due to insufficient verification of data reliability by the system, which can be exploited...

Akamai's Commitment to Reliability

For more than 20 years, Akamai has worked very hard to earn the trust and confidence of our customers and partners by developing services that can be relied upon to be available and secure at all times. We have scaled our business to handle many trillions of web requests quickly and securely each...

Akamai's Commitment to Reliability

For more than 20 years, Akamai has worked very hard to earn the trust and confidence of our customers and partners by developing services that can be relied upon to be available and secure at all times...

Pi-Hole Remove Commands Linux Priv Esc

Pi-Hole versions 3.0 - 5.3 allows for command line input to the removecustomcname, removecustomdns, and removestaticdhcp functions without properly validating the parameters before passing to sed. When executed as the www-data user, this allows for a privilege escalation to root since www-data is...