7973 matches found
VyOS restricted-shell Escape and Privilege Escalation
This module exploits command injection vulnerabilities and an insecure default sudo configuration on VyOS versions 1.0.0 use exploit/linux/ssh/vyos/restrictedshellprivesc msf undefinedrestrictedshellprivesc show actions ...actions... msf undefinedrestrictedshellprivesc set ACTION msf...
lighttpd < 1.4.35 Multiple Vulnerabilities
According to its banner, the version of lighttpd running on the remote host is prior to 1.4.35. It is, therefore, affected by the following vulnerabilities : - A SQL injection flaw exists in the 'modmysqlvhost' module where user input passed using the hostname is not properly sanitized. A remote...
Apple Mac OS X Security Updates (HT209193)-04
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Mac OS X Security Updates (HT209193)-05
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kernel Memory Initialization Vulnerability in Multiple Apple Products (CNVD-2018-22362)
Apple iOS is an operating system developed for mobile devices, tvOS is a smart TV operating system, and watchOS is a smart watch operating system. kernel is one of the kernel components. A security vulnerability exists in the Kernel component of several Apple products. The vulnerability can be...
Apple macOS Improper Authorization Vulnerability
macOS is Apple's proprietary operating system for the Mac line of products. An improper authorization vulnerability exists in the Dock component of Apple macOS Mojave 10.14. An attacker can exploit the vulnerability to access restricted files via a malicious application...
Apple macOS Out-of-Bounds Read Vulnerability
macOS is Apple's proprietary operating system for the Mac line of products. An out-of-bounds read vulnerability exists in the ATS component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...
Apple macOS Restricted Memory Read Vulnerability
macOS is Apple's proprietary operating system for the Mac line of products. A restricted memory read vulnerability exists in the Intel Graphics Driver component in Apple macOS High Sierra 10.13.6. An attacker can exploit the vulnerability to read restricted memory via an application...
Apple macOS High Sierra Intel Graphics Driver Memory Read Vulnerability
Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the drivers for the graphics card. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS High Sierra version 10.13.6. The vulnerability can ...
Apple macOS High Sierra AppleGraphicsControl Memory Read Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the integrated graphics drivers. A memory read vulnerability exists in the AppleGraphicsControl component of Apple macOS High Sierra version 10.13.6, which can be exploite...
About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra
About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra This document describes the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra. About Apple security updates For o...
BSA-2018-730
Security Advisory ID : BSA-2018-730 Component : Fabric OS CLI Revision : 1.0: Initial Multiple Vulnerabilities in Brocade Fabric OS command line interface CLIcould allow a local attacker toescape the restricted shell and, gain root access. Commands Affected firmwaredownload command -CVE-2018-6436...
BSA-2018-731
Security Advisory ID : BSA-2018-731 Component : Fabric OS CLI Revision : 1.0: Initial Multiple Vulnerabilities in Brocade Fabric OS command line interface CLIcould allow a local attacker toescape the restricted shell and, gain root access. Commands Affected help command -CVE-2018-6437 - CVSS 3: 7...
Intel Quartus Family - Privilege Escalation Vulnerability
Document Title: =============== Intel Quartus Family - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2160 Video: https://www.vulnerability-lab.com/getcontent.php?id=2159 Intel ID: INTEL-SA-00151 Ref:...
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '' forward slashes sequences that can resolve to a location that is outside of that directory when...
Managing Thousands of users in Hundreds of branches with a few clicks
We live in a global business world. Almost on a daily basis, we see organizations expanding rapidly across geographies. While businesses in every industry can have international sites, some verticals like banking, finance, education, and retail are more apt to have corporate offices in multiple...
EasyBoot v6.6.0.800 - (Function Key) Buffer Overflow
Document Title: =============== EasyBoot v6.6.0.800 - Function Key Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2155 Release Date: ============= 2018-10-15 Vulnerability Laboratory ID VL-ID: ==================================== 2155...
PT-2018-14404 · Asuswrt Merlin · Merlin.Php
Name of the Vulnerable Software and Affected Versions: Merlin.PHP version 0.6.6 Description: An issue was discovered in the Merlin.PHP component for Asuswrt-Merlin devices, allowing an attacker to execute arbitrary commands due to a popen call in exec.php. The vendor notes that Merlin.PHP is...
