CVE-2022-41572

An issue was discovered in EyesOfNetwork EON through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server...

CVE-2022-41572

A privilege escalation vulnerability exists in EyesOfNetwork (EON) versions 5.3.11 and earlier . The root cause is that nmap can be executed as root , allowing an attacker to gain total control over the server. As a temporary workaround, it is recommended to restrict the execution of nmap to non-...

CVE-2022-41572

An issue was discovered in EyesOfNetwork EON through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server...

DEBIAN-CVE-2024-5594

OpenVPN before 2.6.11 does not santize PUSHREPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs...

File Upload Vulnerability in H3C Intelligent Management Center of Xinhua San Technologies Co.

Xinhua San Technology Co., Ltd. is a global leader in digital solutions. A file upload vulnerability exists in the H3C Intelligent Management Center of Xinhua San Technologies Limited, which can be exploited by an attacker to gain control of the server...

Exploit for Cross-site Scripting in Wondercms

CVE-2023-41425-WonderCMS-Authenticated-RCE Description Won...

Exploit for Code Injection in Geoserver

CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...

Improper Authentication

Cobbler is vulnerable to Improper Authentication. The vulnerability is due to the utils.getsharedsecret function always returning -1, allowing unauthorized users with network access to authenticate as a user with full control of the server...

Arbitrary File Upload

agnai is vulnerable to Arbitrary File Upload. The vulnerability is due to insufficient validation of uploaded files, allowing attackers to place files in attacker-controlled locations on the server, including executable JavaScript files...

CVE-2024-47533

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

Elevation of Privilege Vulnerability in Galaxy Kirin Desktop Operating System by Kirin Software Co.

Galaxy KyLin desktop operating system is a high performance operating system with practicality, innovation and maintainability. An elevation of privilege vulnerability exists in the Galaxy KyLin desktop operating system, which can be exploited by attackers to gain control of a server...

Command Execution Vulnerability in ANYSEC Second Generation Firewall of Shenzhen Zhongke NetWizard Technology Co.

ANYSEC's second-generation firewall is a new generation of application security gateway products for comprehensive L2-L7 security in the mobile Internet era. Ltd. ANYSEC second generation firewall has a command execution vulnerability that can be exploited by attackers to gain control of the serv...

Oracle WebLogic Server Remote Code Execution Vulnerability (CNVD-2024-40886)

Oracle WebLogic Server is an enterprise-class application server developed by Oracle for building and deploying multi-tier distributed applications with high performance, scalability, and reliability. Oracle WebLogic Server has a remote code execution vulnerability that can be exploited by an...

Oracle Fusion Middleware 安全漏洞

Oracle WebLogic Server is an enterprise-class application server developed by Oracle for building and deploying multi-tier distributed applications with high performance, scalability, and reliability. Oracle WebLogic Server has a remote code execution vulnerability that can be exploited by an...

Command Execution Vulnerability in the Management Server of itC Center of Guangdong Paulan Electronics Company Limited (CNVD-2024-41827)

Ltd. is a high-tech enterprise integrating R&D, design, production, sales and service of audio-visual system overall solution products. There is a command execution vulnerability in the itC center management server of Guangdong Paulan Electronics Co., Ltd. that can be exploited by an attacker to...

CVE-2024-8779

OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining control of the server...

Command Execution Vulnerability in anysec 2nd Generation Firewall System of Shenzhen Zhongke Netway Technology Co. Ltd (CNVD-2024-41199)

Ltd. is a high-tech enterprise focusing on the research, development and production of network security products. Shenzhen Zhongke Networthy Technology Co., Ltd. anysec second-generation firewall system has a command execution vulnerability that can be exploited by an attacker to gain control of...

File Upload Vulnerability in the Management Server of itC Center of Guangdong Paulan Electronics Co.(CNVD-2024-38833)

Ltd. is a high-tech enterprise integrating R&D, design, production, sales and service of audio-visual system overall solution products. There is a file upload vulnerability in the management server of Guangdong Paulan Electronics Co. itC Center, which can be exploited by an attacker to gain contr...

Command Execution Vulnerability in MetaCRM6 Customer Relationship Management System of Beijing Meta Software Technology Co.

Beijing Metsoft Technology Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application service industry. A command execution vulnerability exists in the MetaCRM6 customer relationship management system of Beijing Meta Software Technology Co. Ltd, which can be...

File upload vulnerability exists in jpress of Guizhou Small Code Technology Co.(CNVD-2024-38103)

JPress is a complete Java CMS web management system. A file upload vulnerability exists in Guizhou Small Code Technology Co. jpress, which can be exploited by an attacker to gain control of the server...