249 matches found
Malicious code in killroad-ss-x (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2875b4c4d421103f1da170ddee313c0cdff53d4a5fbd07c62396ab27e776fa75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8669 Malicious code in killroad-ss-x (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2875b4c4d421103f1da170ddee313c0cdff53d4a5fbd07c62396ab27e776fa75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Oracle Linux 5 : kernel (ELSA-2018-4219)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4219 advisory. 2.6.18-419.0.0.0.11 - x8664/entry: Don't use IST entry for BP stack orabug 28452062 CVE-2018-8897 Tenable has extracted the preceding description block directly...
SUSE CVE-2017-2583
The loadsegmentdescriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service guest OS crash or gain guest OS privileges via a crafted application...
SUSE CVE-2018-10872
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch...
SUSE CVE-2019-5164
An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger...
CVE-2022-36554
A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...
CVE-2022-36553
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...
CVE-2022-36555
Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack...
CVE-2022-36554
A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...
CVE-2022-36555
Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack...
CVE-2022-36554
A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...
CVE-2022-36553
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...
CVE-2022-36553
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...
Command injection
A command injection vulnerability in the CLI Command Line Interface implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges...
Design/Logic Flaw
Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack...
Command injection
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi...
CVE-2022-36554
CVE-2022-36554 describes a command-injection vulnerability in the CLI of Hytec Inter HWL-2511-SS, affecting versions 1.05 and below. The issue allows attackers to run arbitrary commands with root privileges via the affected CLI. Public documents in the connected set confirm the vulnerability and ...
CVE-2022-36555
CVE-2022-36555 affects Hytec Inter HWL-2511-SS, versions 1.05 and below. The root cause is a SHA512crypt implementation for the root account that can be cracked via brute-force, allowing unauthorized root access. Public sources confirm the vulnerability in the device firmware and describe the imp...
