CVE-2022-43096

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

CVE-2022-28768

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

Code injection

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

Mediatrix 4102 安全漏洞

The Mediatrix 4102 is a VoIP adapter from Mediatrix. A security vulnerability exists in versions prior to Mediatrix 4102 v48.5.2718, which stems from a vulnerability that allows a local attacker to gain root access via the UART port...

PT-2022-26749 · Media5 · Mediatrix 4102

Name of the Vulnerable Software and Affected Versions: Mediatrix 4102 versions prior to 48.5.2718 Description: The issue allows local attackers to gain root access via the UART port. Recommendations: For versions prior to 48.5.2718, update to version 48.5.2718 or later to resolve the issue...

CVE-2022-36786 DLINK - DSL-224 Post-auth RCE.

DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers Network Time Protocol via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router...

CVE-2022-43096

CVE-2022-43096 concerns the Mediatrix 4102 VoIP adapter. According to the documents, versions prior to 48.5.2718 are vulnerable to a local attack that can grant root access via the UART port. The baseline CVSS–3.1 metrics indicate a physical attack vector, with low exploit complexity, no privileg...

Veritas Technologies NetBackup 操作系统命令注入漏洞

Veritas Technologies NetBackup is a storage service from Veritas Technologies, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental...

PT-2022-23625 · D Link · Dlink Router

Name of the Vulnerable Software and Affected Versions: DLINK router version 3.0.8 Description: The issue allows for command injection through the interface used to configure NTP servers via jsonrpc API, potentially running commands with ROOT permissions on the router. This is made possible by...

CVE-2022-43096

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

CVE-2022-43096: On-Chip Debug and Test Interface With Improper Access Control

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

Cisco Identity Services Engine 操作系统命令注入漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information from the network, users, and devices to formulate and enforce policies to regulate the network. The Cisco Identity Services Engine suffers from an...

F5 Big-IP Create Admin User

This creates a local user with a username/password and root-level privileges. Note that a root-level account is not required to do this, which makes it a privilege escalation issue. Note that this is pretty noisy, since it creates a user account and creates log files and such. Additionally, most ...

xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

CVE-2022-20934: Improper Neutralization of Special Elements used in a Command

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper input validation for specific CLI commands...

CVE-2022-45188

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

Heap overflow

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

CVE-2022-45188

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

CVE-2022-45188

CVE-2022-45188 affects Netatalk up to version 3.1.13, where a heap-based buffer overflow in afp_getappl allows code execution via a crafted .appl file, enabling remote root access on some platforms (e.g., FreeBSD used by TrueNAS). Public advisories (Gentoo GLSA, Debian/Ubuntu/DLA notices, Fedora)...

CVE-2022-45188: Out-of-bounds Write

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...