CVE-2024-11681 Remote Code Execution in MacPorts

A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running port selfupdate against the mirror...

PT-2025-1012 · Sonicwall · Gen7 Sonicos Cloud Platform Nsv

Name of the Vulnerable Software and Affected Versions: Gen7 SonicOS Cloud platform NSv affected versions not specified Description: The issue is related to insecure privilege management in the configuration function of the SSH cloud platform. It allows a remote authenticated attacker with low...

MacPorts 操作系统命令注入漏洞

MacPorts is an open source package management system from MacPorts. A security vulnerability exists in MacPorts. An attacker exploiting this vulnerability could execute arbitrary commands as root...

Vulnerabilities fixed in Moxa's cellular routers and network security devices

Moxa has fixed vulnerabilities in Moxa's cellular routers and network security devices Specifically, CVE-2024-9138 and CVE-2024-9140. Vulnerability CVE-2024-9138 involves hard-coded credentials that allow authenticated users to escalate their privileges, ultimately leading to root access. This...

PT-2025-1200 · Moxa · Edr-G9010 +9

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 versions prior to the fixed version Moxa EDR-8010 versions prior to the fixed version Moxa EDR-G902 versions prior to the fixed version Moxa EDR-G903 versions prior to the fixed version Moxa EDR-G9004 versions prior to the fixed...

PT-2025-50587

Name of the Vulnerable Software and Affected Versions smb4k versions prior to 4.0.0-1+deb13u1 Description Two issues were identified in smb4k, a KDE desktop utility used for mounting Samba/CIFS network shares. These issues could lead to a local denial of service or local privilege escalation...

PT-2025-50334

Name of the Vulnerable Software and Affected Versions sd command versions prior to 1.0.0 Description An issue allows attackers to escalate privileges to root via a crafted command. Recommendations Update to a version newer than 1.0.0...

PT-2025-39834

Name of the Vulnerable Software and Affected Versions VMware Aria Operations and VMware Tools versions prior to fixes available since October 2024 open-vm-tools versions prior to 2:11.3.0-2ubuntu0ubuntu20.04.8+esm1 VMware Cloud Foundation 4.x and 5.x, 9.xxx, 13.xxx vSphere Foundation 9.xxx, 13.xx...

CVE-2024-11944

iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of iXsystems TrueNAS devices. Authentication is not required to exploit this vulnerability. T...

CVE-2024-11946 iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability

iXsystems TrueNAS CORE fetchpluginpackagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This vulnerability allows network-adjacent attackers to tamper with firmware update files on affected installations of iXsystems TrueNAS devices. Authentication is not required to...

The vulnerability of the MinIO object storage server, related to insecure management of privileges, allows an attacker to elevate their privileges to the root level.

The vulnerability of the MinIO object storage server is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

PT-2024-36023 · Unknown · Home 5G Hr02 +1

Name of the Vulnerable Software and Affected Versions: home 5G HR02 and Wi-Fi STATION SH-54C affected versions not specified Description: The issue is an OS command injection vulnerability in the configuration restore function. This allows an arbitrary OS command to be executed with root privileg...

VulnCheck KEV: CVE-2023-31446

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup...

Sierra Wireless MGOS 操作系统命令注入漏洞

Sierra Wireless MGOS is a wireless communication device from Sierra Wireless Canada. An operating system command injection vulnerability exists in Sierra Wireless MGOS. An attacker can exploit this vulnerability to execute arbitrary commands as the root user...

VulnCheck KEV: CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands...

PT-2024-10780 · Omg2000 +1 · Omg2000 +1

Name of the Vulnerable Software and Affected Versions: oMG2000 versions 3.15.1 and earlier MG90 versions 4.2.1 and earlier Description: A command injection is possible through the user interface, allowing arbitrary command execution as the root user. Recommendations: For oMG2000 versions 3.15.1 a...

CVE-2020-15934

An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. may allow local users to elevate their privileges to root by creating a malicious script or program on the target machine...

CVE-2020-15934

An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. may allow local users to elevate their privileges to root by creating a malicious script or program on the target machine...

Dell RecoverPoint for Virtual Machines OS Command Injection Vulnerability

Dell RecoverPoint for Virtual Machines is a data protection and recovery solution for virtual machine environments. An OS command injection vulnerability exists in Dell RecoverPoint for Virtual Machines. The vulnerability stems from a lack of proper validation of user input. An attacker could use...

PT-2024-17749 · Arista · Arista Ng Firewall

Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this issue. The specific flaw...