CVE-2022-37924

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37921

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that originates from allowing an authenticated remote user to run arbitrary commands on the underlying host, which could be exploited by a...

The vulnerability of the microprogrammed software of the Ricon Mobile S9922XL and S9922L routers exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. This vulnerability allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of the microprogrammed software of the Ricon Mobile S9922XL and S9922L routers exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that originates from allowing an authenticated remote user to run arbitrary commands on the underlying host, which could be exploited by a...

SUSE SLED12 / SLES12 Security Update : netatalk (SUSE-SU-2022:4360-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4360-1 advisory. - CVE-2022-45188: Fixed heap-based buffer overflow in afpgetappl bsc1205393. Tenable has extracted the preceding...

Exploit for Incorrect Authorization in Hashicorp Consul

CVE-2021-41805 Hashicorp Consul RCE via API Has...

Exploit for Incorrect Authorization in Hashicorp Consul

CVE-2021-41805 Hashicorp Consul RCE via API Has...

Exploit for Incorrect Default Permissions in Askey Rtf3505Vw-N1_Firmware

Privilege-escalation-ASKEY-Router-RTF3505VW-N1 CVE-2022-47040...

Amazon Linux 2 : device-mapper-multipath (ALAS-2022-1883)

The version of device-mapper-multipath installed on the remote host is prior to 0.4.9-136. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1883 advisory. multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or ...

VulnCheck KEV: CVE-2022-37061

All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow...

CVE-2022-44039

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

Franklin Fueling System Colibri 安全漏洞

Franklin Fueling System Colibri is a fuel system from Franklin Fueling System, Inc. in the United States. The system monitors fuel density and inventory levels. A security vulnerability exists in Franklin Fueling System Colibri version 1.9.22.8925, which originates from being affected by a file...

PT-2022-22875 · Proxmox · Proxmox Mail Gateway +1

Name of the Vulnerable Software and Affected Versions: Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG versions prior to pve-http-server 4.1-3 Description: The issue affects Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG when proxying HTTP requests between pvepmgproxy a...

Veritas Technologies NetBackup Flex Scale 安全漏洞

Veritas Technologies NetBackup Flex Scale is a software extension from Veritas Technologies, Inc. It maximizes the power of NetBackup data protection through a containerized, horizontally scalable architecture. A security vulnerability exists in Veritas Technologies NetBackup Flex Scale 3.0 and...

CVE-2022-45045

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

多款Xiongmai设备操作系统命令注入漏洞

Xiongmai NVR devices are a series of network video recorders from China-based Xiongmai Technology Xiongmai. A security vulnerability exists in several Xiongmai NVR devices. An attacker can exploit this vulnerability to execute arbitrary commands as root user. The following products and versions a...

CVE-2022-37921

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

PT-2022-6574 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the configuration of the lighttpd HTTP server, resulting from...

PT-2022-24154 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions prior to 9.2.1.0 Aruba EdgeConnect Enterprise Software versions prior to 9.1.3.0 Aruba EdgeConnect Enterprise Software versions prior to 9.0.7.0 Aruba EdgeConnect Enterprise Software versions pri...