Weak password vulnerability in P-660HW-T1 of Zongqin Communication Equipment Trading (Shanghai) Co.

P-660HW-T1 is a wireless router product of Zongqin Communication Equipment Trading Shanghai Co. The P-660HW-T1 has a weak password vulnerability that can be exploited by an attacker to gain access to the P-660HW-T1 v3 via a An attacker can use this vulnerability to gain access to sensitive...

Cisco Connected Mobile Experiences Elevation of Privilege Vulnerability

Cisco Connected Mobile Experiences CMX is an intelligent Wi-Fi solution that uses the Cisco wireless infrastructure to provide location services and location analytics to consumers' mobile devices. An elevation of privilege vulnerability exists in Cisco Connected Mobile Experiences 10.6.0, 10.6.1...

Cisco Vision Dynamic Signage Director Web Management Interface Path Traversal Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A path traversal vulnerability exists in the Web management interface in Cisco Vision Dynamic Signage Director versions prior to 6.2 SP5, which stems from the interface failing to properly...

CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

CVE-2020-15862

CVE-2020-15862 affects Net-SNMP with an improper privilege management flaw: SNMP WRITE access to the EXTEND MIB allows an authenticated local attacker to execute arbitrary commands as root. Practical impact is local privilege escalation; exploitation requires access to an authenticated SNMP sessi...

ArticaTech Artica Proxy Operating System Command Injection Vulnerability

ArticaTech Artica Proxy is an open source Artica proxy solution from the French company ArticaTech. A security vulnerability exists in the 'service-cmds' parameter of the cyrus.php file in Artica Web Proxy version 4.30.000000. A remote attacker could exploit the vulnerability to execute commands...

CVE-2020-16205

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5...

Command injection

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5...

CVE-2020-11733

An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin...

CVE-2020-11733

An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin...

Default credentials

An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin...

CVE-2020-11733

The CVE-2020-11733 entry relates to Spirent TestCenter and Avalanche admin interface firmware (chassis versions ≤ 5.08). A user with access to an SSH restricted shell can achieve root access via shell metacharacters, enabling reading of sensitive files such as appliance admin configuration source...

CVE-2020-11733

An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin...

Exploit for Prototype Pollution in Apache Struts

CVE-2019-0230 CVE-2019-0230 Exploit This is CVE-20...

PT-2020-5817 · Artica · Artica Web Proxy

Name of the Vulnerable Software and Affected Versions: Artica Web Proxy version 4.30.00000000 Description: The issue is related to a lack of protection against SQL structure manipulation in the fw.login.php component. This can be exploited by a remote attacker to bypass privilege detection and ga...

Canonical Ubuntu apport Unnecessary Privileges Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the appo...

SUSE openSUSE inn elevation of privilege vulnerability

openSUSE is a set of Linux-based free operating system and open source community project of the German SUSE company. A security vulnerability exists in inn in SUSE openSUSE. A local attacker can exploit the vulnerability to elevate privileges to root...

CVE-2020-8026 inn: non-root owned files

A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and...

PT-2020-19928 · Isi +1 · Inn +1

Name of the Vulnerable Software and Affected Versions: inn versions 2.6.2-lp152.1.26 and prior versions inn versions 2.6.2-4.2 and prior versions inn versions 2.5.4-lp151.3.3.1 and prior versions Description: A vulnerability in the packaging of inn in openSUSE allows local attackers with control ...

Arbitrary Code Execution

hylafaxplus is vulnerable to arbitrary code execution. The vulnerability exists as HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users e.g., locations under /var/spool/hylafax that are writable by the uucp account. This...