14287 matches found
(0Day) D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...
CVE-2022-47893
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...
Remote code execution
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...
CVE-2022-47893 NetMan 204 Remote Code Execution
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...
CVE-2022-47893
CVE-2022-47893 : The provided documents describe a remote code execution vulnerability affecting NetMan 204 where an attacker could upload a firmware file containing a webshell to execute arbitrary code as root. Core details: affected product NetMan 204 ; vulnerability via firmware upload; impact...
CVE-2023-36628
A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...
Privilege escalation
A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...
VASA Security Breach
VMware VASA is a virtual volume storage provider program from VMware. A security vulnerability exists in VASA that originates from allowing a user with access to the vSphere/ESXi VMware administrator on FlashArray to gain root access via privilege escalation...
CVE-2023-36628 Privilege Escalation in VASA
A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...
CVE-2023-36628 Privilege Escalation in VASA
A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...
CVE-2023-36628
CVE-2023-36628 describes a privilege-escalation flaw in Pure Storage VASA. The issue arises when a user with access to a vSphere/ESXi administrator on a FlashArray can obtain root access, due to inadequate access control in the VASA component. Affected software is described as Pure Storage VASA (...
The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router operating system exists due to the lack of proper validation of the string provided by the user before it is copied into the fixed-length stack-based buffer. Exploiting this...
PT-2023-5848 · Pure Storage +1 · Flasharray +3
Name of the Vulnerable Software and Affected Versions: Pure Storage VASA affected versions not specified Description: A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation. The issue is related to...
CVE-2023-40375
Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...
CVE-2023-40375
Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...
Privilege escalation
Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...
CVE-2023-40375 IBM i privilege escalation
Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...
CVE-2023-40375 IBM i privilege escalation
Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...
IBM i Security Vulnerabilities
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.2, 7.3, 7.4, and 7.5. An attacker exploiting this vulnerability could elevate privileges to gain root access to the...