Moderate: Red Hat Security Advisory: Satellite 6.9 Release

An update is now available for Red Hat Satellite 6.9 for RHEL 7. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool. Security Fixes: foreman:...

GHSA-GWR8-5J83-483C OS Command Injection and Improper Input Validation in ansible

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

NitroRansomware Asks for $9.99 Discord Gift Codes, Steals Access Tokens

The NitroRansomware malware strain is shaking up the ransomware norm by demanding Discord Nitro gift codes from victims instead of actual money. Discord is a VoIP, instant messaging and digital-distribution platform designed for creating communities. Users communicate with voice calls, video call...

Input validation

Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing...

Cross-Site Scripting (XSS)

@nextcloud/dialogs is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via a toast message...

SUSE: Security Advisory (SUSE-SU-2019:1214-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Remote Command Execution

Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE Date: 12-4-2021 Exploit Author: Jay Sharma Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Tested on: V2.1 CVE : CVE-2021-29003 steps to reproduce Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute...

CVE-2021-28451

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-28345

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2021-28348

Windows GDI+ Remote Code Execution Vulnerability...

CVE-2021-28453

Microsoft Word Remote Code Execution Vulnerability...

CVE-2021-28350

Windows GDI+ Remote Code Execution Vulnerability...

Remote code execution

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-28473

Visual Studio Code Remote Code Execution Vulnerability...

GHSA-PH32-23P8-9RW5 Improper Input Validation in network-manager

network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync" argument...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

...

Eaton Intelligent Power Manager 代码注入漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An Eval injection vulnerability exists in Eaton IPM versions prior to 1.69. The vulnerability arises becaus...