Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

PT-2024-18858 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue is related to a remote code execution vulnerability. There is no information provided about the estimated number of potentially affected devices...

CVE-2023-50382

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

Exploit for Code Injection in Geoserver

CVE-2024-36401 Remote Code Execution RCE Vulnerability In...

CVE-2024-38346 Apache CloudStack: Unauthenticated cluster service port leads to remote execution

The CloudStack cluster service runs on unauthenticated port default 9090 that can be misused to run arbitrary commands on targeted hypervisors and CloudStack management server hosts. Some of these commands were found to have command injection vulnerabilities that can result in arbitrary code...

CVE-2024-38346

CVE-2024-38346 affects Apache CloudStack’s cluster service that runs on an unauthenticated port (default 9090). The provided documents describe a code-injection vulnerability enabling remote code execution on targeted hypervisors and CloudStack management server hosts, potentially leading to comp...

PT-2024-6150 · D Link · D-Link Dar-7000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 up to 20230922 Description: A vulnerability was found in the file /log/decodmail.php of the D-Link DAR-7000, related to deserialization issues. The manipulation of the file argument leads to deserialization. The attack may be...

SeaCMS 安全漏洞

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in SeaCMS 12.9 and earlier versions, which stems from the fact that adminping.php directly splices...

CVE-2024-39943

rejetto HFS aka HTTP File Server 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users if they have Upload permissions. This occurs because a shell is used to execute df i.e., with execSync instead of spawnSync in childprocess in Node.js...

The vulnerability of the yyparse() function in the syntax analyzer and tools for the YANG modeling language Libyang allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the yyparse function in the syntax analyzer and modeling tool of the YANG Libyang language is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures remotely...

CVE-2024-4708 mySCADA myPRO Use of Hard-coded Password

mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...

RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)

TL;DR The Qualys Threat Research Unit has found a high-severity vulnerability, filed under CVE-2024-6387, affects OpenSSH Open Secure Shell, a networking utility often used for remote server management and secure communication over insecure networks. CVE-2024-6387 affects the OpenSSH server on...

CVE-2024-25943

iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application...

CVE-2024-39704

Soft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. 1.4.0 allows a remote attacker to execute arbitrary code on a client's machine via a crafted packet on TCP port 46318...

The vulnerability of configuration management systems and remote execution of operations, related to the creation of special URL addresses, allows attackers to gain access to confidential information.

The vulnerability of configuration management systems and remote execution of operations like Salt is related to the creation of URLs that lead to bypassing the server’s catalog. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2024-39704

CVE-2024-39704 affects Soft Circle’s Melty Blood: Actress Again – Current Code up to version 1.07 Rev. 1.4.0. The vulnerability enables a remote attacker to execute arbitrary code on a client machine by sending a crafted packet to TCP port 46318. Multiple connected sources corroborate a remote-co...

Microsoft Dataverse Remote Code Execution Vulnerability

An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network...

PT-2024-26883 · Cososys +1 · Cososys Unify +1

Name of the Vulnerable Software and Affected Versions: Netwrix CoSoSys Endpoint Protector versions 5.9.3 and earlier CoSoSys Unify versions 7.0.6 and earlier Description: The issue concerns a remote code execution vulnerability in the Endpoint Protector and Unify agent. This vulnerability arises...

PT-2024-27330 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD LTS 7.13.1.0 Dell PowerProtect DD LTS 7.10.1.30 Dell PowerProtect DD LTS 7.7.5.40 Description: The issue is an OS command injection vulnerability in an admin operation. A remote...