17427 matches found
The vulnerability in the implementation of extended classes in the Java framework for creating and optimizing Google Web Toolkit (GWT) applications allows a malicious individual to gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.
The vulnerability of the implementation of extended classes in the Java framework for creating and optimizing Google Web Toolkit GWT browser applications is related to deficiencies in the deserialization mechanism when using the Base64 encoding standard. Exploiting this vulnerability may allow an...
The vulnerability of the web server of the microprogramming software for the universal input/output controller ioLogik, which allows a perpetrator to execute requests on behalf of a legitimate user
The vulnerability of the web server of the microprogramming-based input/output controller ioLogik relates to the of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute requests on behalf of a legitimate user remotely...
[SECURITY] Fedora 39 Update: libssh-0.10.6-1.fc39
The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, trans fer files, use a secure and transparent tunnel for your remote...
PT-2023-28217 · Ibm · Ibm Planning Analytics Local
Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local version 2.0 Description: The issue allows a remote attacker to upload arbitrary files due to the improper validation of file extensions. By sending a specially crafted HTTP request, a remote attacker could exploit...
Vinchin Backup And Recovery Command Injection Exploit
This Metasploit module exploits a command injection vulnerability in Vinchin Backup & Recovery v5.0., v6.0., v6.7., and v7.0.. Due to insufficient input validation in the checkIpExists API endpoint, an attacker can execute arbitrary commands as the web server user. This module requires Metasploit...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the OpenSSH cryptographic protection lies in the possibility of introducing or modifying arguments, allowing attackers to execute arbitrary commands.
The vulnerability of the SSH protocol lies in the fact that it relies on the execution or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
SUSE SLES12 Security Update : ghostscript (SUSE-SU-2023:4917-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4917-1 advisory. - CVE-2023-46751: Fixed dangling pointer in gdevprnopenprinterseekable bsc1217871. Tenable has extracted the preceding description block...
CVE-2023-35895
IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 259116...
(0Day) Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpsScheduler class. The issue results from an exposed dangerous method. An...
CVE-2023-46263
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution...
PT-2023-29937 · Avalanche · Avalanche
Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.4.1 and below Description: An unrestricted upload of file with a dangerous type vulnerability exists that could allow an attacker to achieve remote code execution. Recommendations: For Avalanche versions 6.4.1 and below,...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
OS Command Injection
Overview Affected versions of this package are vulnerable to OS Command Injection due to improper handling of user names or host names containing shell metacharacters. A remote attacker may be able to execute arbitrary OS commands by using expansion tokens e.g., %u, %h with such user names or hos...
PT-2023-32742 · Cambium · Cambium Epmp Force 300-25
Name of the Vulnerable Software and Affected Versions: Cambium ePMP Force 300-25 version 4.7.0.1 Description: The issue is a code injection vulnerability that could allow an attacker to perform remote code execution and gain root privileges. Recommendations: For Cambium ePMP Force 300-25 version...
MajorDoMo Command Injection
This module exploits a command injection vulnerability in MajorDoMo versions before 0662e5e. Module Options msf use exploit/linux/http/majordomo/cmdinjectcve202350917 msf undefinedcmdinjectcve202350917 show actions ...actions... msf undefinedcmdinjectcve202350917 set ACTION msf...
The vulnerability of HTTPSd on FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system allows a perpetrator to execute arbitrary code or commands.
The vulnerability of HTTPSd in FortiOS operating systems, along with the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system, is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a malicious actor to...
Softnext Technologies Mail SQR Expert Operating System Command Injection Vulnerability
Softnext Technologies Mail SQR Expert is a comprehensive email content security management system from Softnext Technologies. Softnext Technologies Mail SQR Expert v230330 prior version suffers from an operating system command injection vulnerability, which stems from insufficient special charact...
