4642 matches found
Qnap QTS Command Injection (CVE-2018-0730)
This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...
Qnap QTS Command Injection (CVE-2024-21903)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...
PT-2024-35557
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65 Description A vulnerability in the Linux kernel has been resolved, related to the nvme-multipath feature. The issue occurs when a partition scan is performed within the controller's scan work context, whic...
Fedora 39 : libgsf (2024-7d06f67cf5)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7d06f67cf5 advisory. Fixes for memory vulnerabilities. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
Fedora 40 : firefox (2024-db72f480e8)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-db72f480e8 advisory. - New upstream version 131.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
@antonovicha/hdbext-async (>=1.0.0, <=1.0.4), @christianwheeler/typeorm (>=0.2.23, <=0.2.27) +37 more potentially affected by CVE-2024-45277 via @sap/hana-client (>=2.3.119, <=2.21.28)
@sap/hana-client NPM version =2.3.119, =1.0.0, =0.2.23, =0.0.1-alpha.3, =0.1.2, =1.1.1, =0.1.0, =1.0.2, =6.2.0, =2.0.0, =1.0.0, =1.1.0, =2.4.3, =1.3.2, =1.26.1 and more Source cves: CVE-2024-45277 Source advisory: OSV:GHSA-6339-GV7W-G5F4...
CVE-2024-23375
Memory corruption during the network scan request...
CVE-2024-23375
CVE-2024-23375 relates to memory corruption in Qualcomm chipsets, stemming from a buffer copy in the RIL that does not check input size. Multiple sources (NVD/Red Hat/CVE Repo) describe the issue as a memory corruption during the network scan request, with impact described as high for confidentia...
CVE-2024-23375 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL
Memory corruption during the network scan request...
PT-2024-19851 · Qualcomm · Snapdragon +13
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs during network scan requests. This can potentially lead to exploitation. No information is provided abo...
SUSE CVE-2024-31228
Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as KEYS, SCAN, PSUBSCRIBE, FUNCTION LIST, COMMAND LIST and ACL definitions. Matching of extremel...
Exploit for CVE-2024-9441
Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441...
reNgine 2.2.0 Command Injection
Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Date: 2024-09-29 Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3...
reNgine 2.2.0 - Command Injection (Authenticated) Vulnerability
Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3. Modify any Scan...
reNgine 2.2.0 - Command Injection (Authenticated)
Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Date: 2024-09-29 Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3...
Apache Struts 2.0.0 < 2.3.18 RCE (S2-008)
The version of Apache Struts installed on the remote host is prior to 2.3.18. It is, therefore, affected by a vulnerability as referenced in the S2-008 advisory. - The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute...
CVE-2024-46648
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scanfolder...
PT-2024-32093 · Enms · Enms
Name of the Vulnerable Software and Affected Versions: eNMS versions 4.4.0 through 4.7.1 Description: The issue is related to a Directory Traversal vulnerability in the scan folder feature. This vulnerability allows unauthorized access to sensitive files and directories. Recommendations: For eNMS...
eNMS 安全漏洞
eNMS is a network automation platform from eNMS Open Source. A security vulnerability exists in eNMS versions 4.4.0 through 4.7.1, which stems from vulnerability to directory traversal attacks via scanfolder...