Backdoor.Win32.NerTe.a Unauthenticated Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/125364b0cdae80c10f00b75c8e2cfa47B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NerTe.a Vulnerability: Unauthenticated Remote Command Execution Description: The...

CVE-2021-27037

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code...

Kaseya VSA RMM 代码问题漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A security vulnerability exists in Kaseya VSA versions prior to 9.5.5, which can be exploited by an attacker to remote...

CVE-2021-34616

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34615

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34612

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34615

The CVE-2021-34615 issue affects Aruba ClearPass Policy Manager and is a remote arbitrary command execution vulnerability. Affected versions are prior to 6.10.0, 6.9.6, and 6.8.9. Multiple sources describe that the vulnerability stems from input data not being properly validated, enabling an atta...

CVE-2021-34613

Aruba ClearPass Policy Manager is affected by a remote command injection/arbitrary code execution vulnerability (CVE-2021-34613) in versions prior to 6.10.0, 6.9.6, and 6.8.9. The issue arises from processing unvalidated user input, enabling an attacker to execute system commands. Aruba released ...

CVE-2021-34612

CVE-2021-34612 relates to Aruba ClearPass Policy Manager, where a remote arbitrary command execution was identified due to improper processing of input data in the web interface. Affected versions are prior to 6.10.0, 6.9.6 and 6.8.9. The issue is described as a command-injection vulnerability th...

CVE-2021-34614

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34614

CVE-2021-34614 affects Aruba ClearPass Policy Manager earlier than 6.10.0, 6.9.6, and 6.8.9, permitting remote arbitrary command execution. The available connected records confirm the product and vulnerability class (remote code execution) and state that Aruba released updates to address the vuln...

CVE-2021-34610

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34610

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

Deserialization of untrusted data

A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

QSAN Storage Manager Command Injection Vulnerability (CNVD-2021-48974)

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A command injection vulnerability exists in QSAN Storage Manager 3.3.1 and earlier versions. The vulnerability stems from QuickInstall failing to properly filter special parameters. A remote,...

CVE-2021-32529

Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32531

OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0...

CVE-2021-32530

CVE-2021-32530 describes an OS command injection in the QSAN XEVO product’s Array function, where the status parameter could be used by a remote, unauthenticated attacker to execute arbitrary commands. Reports from multiple sources (NVD entry and CNVD/CNNVD-style disclosures) confirm the vulnerab...

CVE-2021-32529

CVE-2021-32529 affects QSAN XEVO and QSAN SANOS. Multiple connected sources describe a remote, unauthenticated command-injection vulnerability that could allow an attacker to execute arbitrary commands on affected devices. The NVD entry lists a high/critical impact depending on scoring system, wi...