17412 matches found
Metasploit Weekly Wrap-Up 01/26/24
Direct Syscalls Support for Windows Meterpreter Direct system calls are a well-known technique that is often used to bypass EDR/AV detection. This technique is particularly useful when dynamic analysis is performed, where the security software monitors every process on the system to detect any...
CVE-2024-20253
CVE-2024-20253 affects Cisco Unified Communications Manager and related UC/Contact Center products. The root cause is improper processing of user-supplied data read into memory, enabling an unauthenticated, remote attacker to send a crafted message to a listening port and execute arbitrary comman...
CVE-2024-23616
A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...
CVE-2024-23624 D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...
UBUNTU-CVE-2023-52076
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...
Remote code execution
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...
PT-2024-19979 · Motorola · Motorola Mr2600
Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveSysLogParams parameter of the Motorola MR2600. A remote attacker can exploit this issue to achieve command execution...
PT-2024-19980 · Motorola · Motorola Mr2600
Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveStaticRouteIPv4Params parameter. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is...
PT-2024-19971 · Symantec · Symantec Server Management Suite
Name of the Vulnerable Software and Affected Versions: Symantec Server Management Suite versions prior to 7.9 Description: A buffer overflow vulnerability exists, allowing a remote, anonymous attacker to achieve remote code execution as SYSTEM. Recommendations: For Symantec Server Management Suit...
PT-2024-19981 · Motorola · Motorola Mr2600
Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveStaticRouteIPv6Params parameter. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is...
The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the kernel of operating systems macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.
The vulnerability of the kernel in operating systems such as macOS, iOS, and iPadOS is related to a type conversion error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2023-51887
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...
Command injection
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...
Buffer overflow
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...
[SECURITY] Fedora 39 Update: ansible-core-2.16.2-2.fc39
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
The vulnerability of the Database Administrator plugin for WordPress content management systems allows attackers to execute arbitrary SQL queries.
The vulnerability of the Database Administrator plugin for WordPress content management systems is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
CVE-2023-36177
An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...
Input validation
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote...