The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the kernel of operating systems macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the kernel in operating systems such as macOS, iOS, and iPadOS is related to a type conversion error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2023-51887

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

Buffer overflow

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

Command injection

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

[SECURITY] Fedora 39 Update: ansible-core-2.16.2-2.fc39

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

The vulnerability of the Database Administrator plugin for WordPress content management systems allows attackers to execute arbitrary SQL queries.

The vulnerability of the Database Administrator plugin for WordPress content management systems is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

CVE-2023-36177

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...

Input validation

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote...

a-blog cms security breach

a-blog cms is a Japanese content management system CMS. A security vulnerability exists in a-blog cms. A remote attacker can exploit this vulnerability to execute arbitrary JavaScript code by uploading a specially crafted SVG file. The following versions are affected: version 3.1.x to version 3.1...

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications lies in the lack of protective measures for the website structure. This allows attackers to circumvent the restrictions on JavaScript execution.

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to circumvent...

HPESBHF04576 rev.4 - HPE Superdome Flex, Superdome Flex 280 and Compute Scale-up Server 3200 Servers, Multiple Vulnerabilities (PixieFAIL)

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to v3.100.26 HPE Superdome Flex 280 Server - Prior to v1.80.20 HPE Compute Scale-up Server 3200 -...

MyQ Solution Print Server Security Vulnerability

MyQ Solution Print Server is an easy-to-use print management software from MyQ Solution. It allows you to control your printers, reduce printing costs, and be environmentally friendly by reducing unnecessary waste. A security vulnerability exists in MyQ Solution Print Server prior to version 8.2...

MajorDoMo Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in MajorDoMo versions before 0662e5e. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MajorDoMo Command Injection', 'Descriptio...

Ansible Agent Payload Deployer Exploit

This exploit module creates an ansible module for deployment to nodes in the network. It creates a new yaml playbook which copies our payload, chmods it, then runs it on all targets which have been selected default all. This module requires Metasploit: https://metasploit.com/download Current...

Atlassian Confluence < 7.19.18 Multiple Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.19.18, 8.x prior to 8.5.5 or 8.6.x prior to 8.7.2. It is, therefore, affected by multiple remote code execution vulnerabilities. Note that the scanner has not tested for...

VulnCheck KEV: CVE-2023-30258

Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request...

Trend Micro Mobile Security for Enterprises vpplist_assign_list Cross-Site Scripting Vulnerability

This vulnerability allows remote attackers to execute web requests with the victim's privileges on affected installations of Trend Micro Mobile Security for Enterprises. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious...

CVE-2023-43823

A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution...