Unitrends Backup 操作系统命令注入漏洞

Unitrends Backup is designed to eliminate data loss, ransomware and risk. A remote code execution vulnerability exists in versions of Unitrends Backup prior to 10.5.5, which can be exploited by an attacker to execute arbitrary code as root...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An attacker could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service condition...

GitLab: Installing Gitlab runner with Docker-In-Docker allows root access

Summary Installing a Gitlab runner using official documents: https://docs.gitlab.com/ee/ci/docker/usingdockerbuild.htmluse-docker-socket-binding allows any user with access to Gitlab CI to have root access on Gitlab Runner server. Steps to reproduce Install Gitlab-runner binary using official...

CVE-2021-20863

OS command injection vulnerability in ELECOM routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

PT-2021-6476 · NetGear · Netgear R6400V2 +6

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400v2 affected versions not specified NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6900P affected versions not specified NETGEAR R7000 affected versions not specified NETGEAR R7000P affected versions not specified NETGEAR RS40...

PT-2021-6473 · NetGear · Netgear Rax50 +20

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6400 versions affected versions not specified NETGEAR R6400v2 versions affected versions not specified NETGEAR R6900P versions affected versions not specified NETGEAR R7000 versions affected...

PT-2021-6481 · NetGear · Netgear Rax50 +20

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 version not specified NETGEAR R6400v2 version not specified NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR R6900P version not specified NETGEAR R7000 version not specified NETGEAR R7000P version not specified NETGEAR R8500...

PT-2021-6477 · NetGear · Netgear Rax50 +13

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400v2 version not specified NETGEAR R6700v3 version not specified NETGEAR R7000 version not specified NETGEAR R8500 version not specified NETGEAR RAX15 version not specified NETGEAR RAX20 version not specified NETGEAR RAX35v2 versio...

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

CVE-2021-43284

An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets updated from its default value of admin. This enables an attacker to gain control of the device through SSH regardless of whether the admin password was changed on the web interface...

RHEL 7 : samba (RHSA-2021:4844)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4844 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

CVE-2021-35033

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the...

CVE-2021-35033

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the...

CVE-2021-35033

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the...

Design/Logic Flaw

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the...

CVE-2021-35033

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the...

CVE-2021-35033

CVE-2021-35033 affects Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60 and WSR30 firmware with pre-configured password management. Root access could be gained by a local attacker dismantling the device and using a USB-UART connection, or if remote assistance was enabled by an authenticated user. Conn...

CVE-2021-37022

There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated...

PT-2021-20804 · Zyxel · Zyxel Wsq50 +5

Name of the Vulnerable Software and Affected Versions: Zyxel NBG6818 affected versions not specified Zyxel NBG7815 affected versions not specified Zyxel WSQ20 affected versions not specified Zyxel WSQ50 affected versions not specified Zyxel WSQ60 affected versions not specified Zyxel WSR30 affect...

CVE-2021-35033: Password in Configuration File

A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles the device and uses a USB-to-UART cable to connect the...