Remote code execution

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...

PT-2024-19979 · Motorola · Motorola Mr2600

Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveSysLogParams parameter of the Motorola MR2600. A remote attacker can exploit this issue to achieve command execution...

PT-2024-19980 · Motorola · Motorola Mr2600

Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveStaticRouteIPv4Params parameter. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is...

PT-2024-19971 · Symantec · Symantec Server Management Suite

Name of the Vulnerable Software and Affected Versions: Symantec Server Management Suite versions prior to 7.9 Description: A buffer overflow vulnerability exists, allowing a remote, anonymous attacker to achieve remote code execution as SYSTEM. Recommendations: For Symantec Server Management Suit...

PT-2024-19981 · Motorola · Motorola Mr2600

Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: A command injection vulnerability exists in the SaveStaticRouteIPv6Params parameter. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is...

The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the setDiagnosisCfg function in the TOTOLINK LR1200GB router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the kernel of operating systems macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the kernel in operating systems such as macOS, iOS, and iPadOS is related to a type conversion error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2023-51887

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

Command injection

Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...

Buffer overflow

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...

[SECURITY] Fedora 39 Update: ansible-core-2.16.2-2.fc39

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

The vulnerability of the Database Administrator plugin for WordPress content management systems allows attackers to execute arbitrary SQL queries.

The vulnerability of the Database Administrator plugin for WordPress content management systems is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

CVE-2023-36177

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...

Input validation

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote...

a-blog cms security breach

a-blog cms is a Japanese content management system CMS. A security vulnerability exists in a-blog cms. A remote attacker can exploit this vulnerability to execute arbitrary JavaScript code by uploading a specially crafted SVG file. The following versions are affected: version 3.1.x to version 3.1...

HPESBHF04576 rev.4 - HPE Superdome Flex, Superdome Flex 280 and Compute Scale-up Server 3200 Servers, Multiple Vulnerabilities (PixieFAIL)

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to v3.100.26 HPE Superdome Flex 280 Server - Prior to v1.80.20 HPE Compute Scale-up Server 3200 -...

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications lies in the lack of protective measures for the website structure. This allows attackers to circumvent the restrictions on JavaScript execution.

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to circumvent...

MyQ Solution Print Server Security Vulnerability

MyQ Solution Print Server is an easy-to-use print management software from MyQ Solution. It allows you to control your printers, reduce printing costs, and be environmentally friendly by reducing unnecessary waste. A security vulnerability exists in MyQ Solution Print Server prior to version 8.2...

MajorDoMo Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in MajorDoMo versions before 0662e5e. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MajorDoMo Command Injection', 'Descriptio...