The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system allows a hacker to elevate their privileges to the root level.

The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system relates to the absence of resource initialization. Exploiting this vulnerability allows a malicious actor to gain privileges to the root level remotely...

PT-2024-38406

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to...

PT-2024-38407

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to...

The vulnerability of the command-line interface (CLI) of the Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series allows a attacker to elevate their privileges to the root level.

The vulnerability of the command-line interface CLI of the Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the SSH service on the SmartOS Wi-Fi router AdTran SRG 834-5 allows a attacker to execute arbitrary operating system commands with root privileges.

The vulnerability of the SSH service on the SmartOS Wi-Fi router AdTran SRG 834-5 is related to the use of pre-installed credentials due to incorrect processing of the MAC address sequence. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating syste...

(0Day) (Pwn2Own) ChargePoint Home Flex OCPP bswitch Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OCPP messages. The issue results from...

PT-2024-20210 · Chargepoint · Chargepoint Home Flex

Name of the Vulnerable Software and Affected Versions: ChargePoint Home Flex affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the handling of OCPP messages due to the lack of prope...

PT-2024-20177 · Chargepoint · Chargepoint Home Flex

Name of the Vulnerable Software and Affected Versions: ChargePoint Home Flex affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. No authentication is required to...

Exploit for Race Condition in Openbsd Openssh

cve-2024-6387-poc a signal handler race condition in OpenSSH...

Motorola Q14 安全漏洞

The Motorola Q14 is a mesh router system from Motorola USA. A security vulnerability exists in the Motorola Q14 prior to v1.5.0.16, which stems from a command injection vulnerability that could allow an authenticated user to execute operating system commands as root via a specially crafted API...

PT-2024-11623 · Motorola · Q14 Mesh Router Firmware +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A command injection issue could allow an authenticated user to execute operating system commands as root via a specially crafted API request. Recommendations: At the moment, there i...

OpenMediaVault rpc.php Authenticated Cron Remote Code Execution Exploit

OpenMediaVault allows an authenticated user to create cron jobs as root on the system. An attacker can abuse this by sending a POST request via rpc.php to schedule and execute a cron entry that runs arbitrary commands as root on the system. All OpenMediaVault versions including the latest release...

OpenMediaVault rpc.php Authenticated Cron Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenMediaVault rpc.php Authenticated Cron Remote Code Execution', 'Description' = %q OpenMediaVault allows an authenticated user to create cron...

Command or parameter injection via unique embedded switch SNMP commands (CVE-2024-5461)

Implementation of the Simple Network Management Protocol SNMP operating on the Brocade 6547 FC5022 embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only...

Exploit for CVE-2024-41628

CVE-2024-41628 Simple exploit script developed by Redshift Cy...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to version 14.6, where an application with root privileges may be able to execute arbitrary code with kernel privileges...

PT-2024-29513 · Syrotech · Sy-Gpon-1110-Wdont Router

Name of the Vulnerable Software and Affected Versions: SyroTech SY-GPON-1110-WDONT Router affected versions not specified Description: The issue exists due to the presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit...

SyroTech SY-GPON-1110-WDONT 安全漏洞

The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. The SyroTech SY-GPON-1110-WDONT suffers from an Access Control Error vulnerability that arises from the presence of root terminal access on the serial interface without proper access control. An attacker could exploit this...

CVE-2024-24621

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user...

CVE-2024-24621 Softaculous Webuzo Authentication Bypass

Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user...