CVE-2022-32535: Execution with Unnecessary Privileges

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch...

CVE-2022-32252

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The application does not perform the integrity check of the update packages. Without validation, an admin user might be tricked to install a malicious package, granting root privileges to an attacker...

CVE-2022-32252

CVE-2022-32252 affects Siemens SINEMA Remote Connect Server (all versions

CVE-2022-28704

Improper access control vulnerability in Rakuten Casa version APFV141 or APFV200 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connect...

Improper access control

Improper access control vulnerability in Rakuten Casa version APFV141 or APFV200 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connect...

Hardcoded credentials

Rakuten Casa version APFV141 or APFV200 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation...

CVE-2022-28704

Improper access control vulnerability in Rakuten Casa version APFV141 or APFV200 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connect...

CVE-2022-28704

CVE-2022-28704 affects Rakuten Casa versions AP_F_V1_4_1 and AP_F_V2_0_0. The vulnerability is an improper access control that lets a remote attacker log in with root privileges and perform arbitrary operations when the product is in its default settings that accept SSH connections from the WAN a...

PT-2022-19677

Name of the Vulnerable Software and Affected Versions Rakuten Casa version AP F V1 4 1 Rakuten Casa version AP F V2 0 0 Description The issue is related to a hard-coded credential in Rakuten Casa, which may allow a remote unauthenticated attacker to log in with root privilege and perform arbitrar...

CVE-2022-29525: Use of Hard-coded Credentials

Rakuten Casa version APFV141 or APFV200 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation...

CVE-2022-28704: Undefined Security Weakness

Improper access control vulnerability in Rakuten Casa version APFV141 or APFV200 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connect...

Debian: Security Advisory (DSA-5160-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-31483

CVE-2022-31483 affects HID Mercury LNL-4420 family (firmware

The vulnerability of the nft_expr_init function in the Linux operating system’s Netfilter packet filtering software allows a hacker to elevate their privileges to the root level.

The vulnerability of the nftexprinit function in the Netfilter packet filtering software of the Linux operating system’s kernel is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

K0Otkit - Universal Post-Penetration Technique Which Could Be Used In Penetrations Against Kubernetes Clusters

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters. With k0otkit, you can manipulate all the nodes in the target Kubernetes cluster in a rapid, covert and continuous way reverse shell. k0otkit is the combination of Kubernetes and...

CVE-2022-26721

A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges...

The vulnerability of the VMware Workspace One Access application management platform, related to lack of access control, allows a hacker to elevate their privileges to the root level.

The vulnerability of the VMware Workspace One Access application management platform is related to lack of access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

Checkmk 后置链接漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk, which can be exploited by an attacker to upgrade to root by editing an OMD hook link.The following products and versions are affected: versions prior to 1.6.0p29, 2.x versions prior to 2.0.0p25, and 2.1.x versions prior to 2.1.0b10...

CVE-2022-0486

Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is...

GHSA-CV3F-PX9R-54HM Phusion Passenger information disclosure

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10, if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root...