14348 matches found
CVE-2024-43385
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXYHTTPPORT in mGuard devices...
CVE-2024-43386
CVE-2024-43386 affects Phoenix Contact mGuard devices (including FL/TC MGUARD) where a low-privileged remote attacker can trigger OS command execution as root via improper neutralization of elements in the EMAIL_NOTIFICATION.TO variable. The issue is rooted in input handling of that field, enabli...
CVE-2024-43385 Phoenix Contact: OS command execution through PROXY_HTTP_PORT in mGuard devices
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXYHTTPPORT in mGuard devices...
PHOENIX CONTACT FL/TC MGUARD 操作系统命令注入漏洞
The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. An operating system command injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD, which originates from an incorrect neutralization of a special element in the variable PROXYHTTPPORT in the mGuard...
Haichangxing HCX H822 安全漏洞
Haichangxing HCX H822 is a wireless router from Haichangxing China. A security vulnerability exists in Haichangxing HCX H822 v1.0.1557.15.35P0, which stems from the presence of a False Access Control Vulnerability, where unauthenticated factory mode reset and command injection can lead to...
PT-2024-30546 · Mguard · Mguard
Name of the Vulnerable Software and Affected Versions: mGuard devices affected versions not specified Description: A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL NOTIFICATION.TO...
PHOENIX CONTACT FL/TC MGUARD 操作系统命令注入漏洞
The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. An operating system command injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD, which stems from improper neutralization of a special element in the variable EMAILRELAYPASSWORD in the mGuard...
VICIdial 安全漏洞
VICIdial is a software suite from VICIdial, Inc. designed to interact with the Asterisk open source Pbx telephony system as a complete inbound/outbound contact center suite with inbound email support. A security vulnerability exists in VICIdial. An attacker can exploit this vulnerability to execu...
CVE-2024-45173
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper privilege management concerning sudo privileges, C-MOR is vulnerable to a privilege escalation attack. The Linux user www-data running the C-MOR web interface can execute some OS commands as root via Sudo...
CVE-2024-32668
An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller. A malicious, privileged software running in a guest VM can exploit the vulnerability to achieve code execution on the host in the bhyve userspace process, whic...
CVE-2024-32668 bhyve(8) privileged guest escape via USB controller
An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller. A malicious, privileged software running in a guest VM can exploit the vulnerability to achieve code execution on the host in the bhyve userspace process, whic...
CVE-2024-42416 Multiple issues in ctl(4) CAM Target Layer
The ctlreportsupportedopcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on...
CVE-2024-8178 Multiple issues in ctl(4) CAM Target Layer
The ctlwritebuffer and ctlreadbuffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which...
CVE-2024-8178
CVE-2024-8178 affects the FreeBSD ctl subsystem (ctl_write_buffer and ctl_read_buffer) where memory allocated for return to userspace was not initialized, enabling abuse via virtio_scsi in guest VMs. Exploitation could allow code execution on the host bhyve process (typically running as root), wi...
CVE-2024-8178 Multiple issues in ctl(4) CAM Target Layer
The ctlwritebuffer and ctlreadbuffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which...
CVE-2024-41928
Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve...
FreeBSD 安全漏洞
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that originates from malware running in a guest VM that can utilize a buffer overflow to enable code execution in a bhyve userspace process typically running as root on the host...
PT-2024-9569 · Veeam · Veeam Agent For Linux
Name of the Vulnerable Software and Affected Versions: Veeam Agent for Linux affected versions not specified Description: A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level. This issue is related to the lack of an...
Dell PowerScale OneFS Incorrect Privilege Assignment Vulnerability
Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. Dell PowerScale OneFS suffers from an incorrect privilege assignment vulnerability that could be exploited by an attacker to gain root-level...