23 matches found
CVE-2020-8554
Create Kubernetes cluster kind create cluster --config ./kind.yaml The cluster must have certmanager: https://cert-manager.io/docs/installation/kubernetes/ Test vulnerability kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name: kubeproxy-mitm --- apiVersion: apps/v1 kind:...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38561)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setUPnPCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST reque...
CVE-2026-51664: Improper Access Control
Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
WS-2019-0242
soletta-dev-app all versions are vulnerable to Command Injection when not validating user input on the /api/service/status API endpoint, passing contents of the service query parameter to an exec call...
CVE-2026-2754
Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with network access to the device can execute HTTP GET requests to TCP port 8080 to retrieve internal network parameters including ECDIS & OT...
MiracleLinux 3 : vixie-cron-4.1-81.AXS3 (AXSA:2012-254:01)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-254:01 advisory. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified programs at scheduled times. Vixie cron adds...
CVE-2019-13486
In Xymon through 4.3.28, a stack-based buffer overflow exists in the status-log viewer component because of expansion in svcstatus.c...
API Mediation Layer security vulnerabilities
API Mediation Layer is a Zowe open source API mediation layer. It provides a single point of access to the mainframe services REST API. A security vulnerability exists in API Mediation Layer. An attacker exploiting this vulnerability could check whether a service is running...
Using Veeam Backup Software on Provisioning Services Server
While running Veeam software to backup Provisioning Services PVS servers, one of the PVS servers display status as Down in PVS server console regardless of whether the stream service is running. The following screen shot shows the server status in PVS console. The following screen shot shows the...
monitor status "Unkown" with Last response "Probe Skipped, Service status OFS"
...
Centreon operating system command injection vulnerability
Centreon, a free and open source IT and application monitoring software, is vulnerable to an OS command injection vulnerability in /graphStatus/displayServiceStatus.php in Centreon version 19.10.8. A remote attacker can exploit this vulnerability to execute arbitrary OS commands via shell...
Citrix ADM: Incorrect status of service under LB "Going out of Service"
When Admin is trying to disable the service of Load balancing V-server from ADM, encounters Going Out of service On ADC same service is being marked OUT OF SERVICE as expected On ADC we see, the status of service correctly changed to "Out of Service": But on ADM, status of service still shows GOI...
PT-2020-21168
Name of the Vulnerable Software and Affected Versions soletta-dev-app versions affected versions not specified Description The issue concerns a lack of validation for user input on the "/api/service/status" API endpoint. Specifically, the contents of the service query parameter are passed to an...
How to configure Monitor to check services status of RADIUS servers ?
Configure Monitor for RADIUS server...
Troubleshooting pointers for TCP monitor showing DOWN
How to troubleshoot an issue related to TCP monitor down reported for services configured on NetScaler...
CVE-2014-4687
Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...
Moderate: Red Hat Security Advisory: pki-core security, bug fix and enhancement update
Updated pki-core packages that fix multiple security issues, two bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...
The dependency service or group failed to start
Challenge Cause This error is usually caused by one or more Windows VSS services being disabled. To fix it, you will need to go to Start Run, and enter "services.msc" without quotes. Here, you will see a list of services, their description, and whether or not they are running. Make sure RPC servi...
setroubleshoot security and bug fix update
setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...