ROS-20240412-04

A vulnerability in Salt's configuration management and remote execution system is related to the copying a script along a predictable path. Exploitation of the vulnerability could allow an attacker, acting remotely to run their own script. A vulnerability in the symbolic.py component of the Pytho...

Gibbon School Platform Authenticated PHP Deserialization Exploit

A Remote Code Execution vulnerability in Gibbon online school platform version 26.0.00 and lower allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the endpoint /modules/System%20Admin/importrun.php&type=externalAssessment&step=4. As it...

PT-2024-25255 · Tiagorlampert · Chaos

Name of the Vulnerable Software and Affected Versions: tiagorlampert CHAOS versions before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e tiagorlampert CHAOS version v5.0.1 Description: The issue allows a remote attacker to execute arbitrary code via the...

CVE-2024-30880

Reflected Cross Site Scripting XSS vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function...

CVE-2024-30883

CVE-2024-30883 affects RageFrame2 v2.6.43 with a Reflected XSS in the aspectRatio parameter of the image cropping function. Exploitation could allow remote attackers to run arbitrary web scripts or HTML and access sensitive information. Public sources from NVD/Red Hat and third-party advisories c...

The vulnerability of the application programming interface for the Rust programming language interpreter on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Rust programming language-based application programming interface for Windows operating systems relates to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by invoking batch file extensions...

D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution...

Exploit for Command Injection in Dlink Dns-320L_Firmware

D-Link NAS Command Execution Exploit This Python script explo...

CVE-2024-30712

CVE-2024-30712 entry is rejected/not used; this ID does not represent an active vulnerability.

PT-2024-2879 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: A critical issue affects the R7WebsSecurityHandler function of the /goform/execCommand file, leading to a stack-based buffer overflow when the password argument is manipulated. This can be exploite...

CVE-2023-6999

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to, and including, 3.0.10 with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2. This makes it possible for authenticated attackers, with contributor level access ...

CVE-2024-28942

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

AZL-42383 CVE-2024-26256 affecting package libarchive for versions less than 3.6.1-3

Libarchive Remote Code Execution Vulnerability...

CVE-2024-26195 DHCP Server Service Remote Code Execution Vulnerability

...

CVE-2024-28909 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

...

CVE-2023-49913

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Driver for SQL Server is a standalone data access application programming interface API for OLE DB. A remote code execution vulnerability exists in Microsoft OLE DB Driver for SQL Server, which can be exploited by an attacker to execute arbitrary code on the system...

PT-2024-2719 · Fortinet · Forticlientlinux

Name of the Vulnerable Software and Affected Versions: FortiClientLinux versions 7.0.3 through 7.0.4 FortiClientLinux versions 7.0.6 through 7.0.10 FortiClientLinux version 7.2.0 Description: An improper control of generation of code 'code injection' in FortiClientLinux allows an attacker to...

PT-2024-3119 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...