Lucene search
+L

16132 matches found

OSV
OSV
added 2022/10/18 3:15 p.m.8 views

CVE-2022-33874

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the...

9.8CVSS6AI score0.0292EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/18 3:15 p.m.7 views

CVE-2022-33874

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the...

9.8CVSS6.1AI score0.0292EPSS
SaveExploits0References2
Prion
Prion
added 2022/10/18 3:15 p.m.22 views

Command injection

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the...

7.5CVSS9.9AI score0.0292EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/10/18 3:15 a.m.24 views

CVE-2022-22239

An Execution with Unnecessary Privileges vulnerability in Management Daemon mgd of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially remote systems. This vulnerability allows a locally...

8.8CVSS0.00183EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/18 2:46 a.m.30 views

CVE-2022-22239 Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation

An Execution with Unnecessary Privileges vulnerability in Management Daemon mgd of Juniper Networks Junos OS Evolved allows a locally authenticated attacker with low privileges to escalate their privileges on the device and potentially remote systems. This vulnerability allows a locally...

8.2CVSS8.9AI score0.00183EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2022/10/17 8:49 a.m.410 views

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet Forti...

9.8CVSS10AI score0.99984EPSS
SaveExploits25
GithubExploit
GithubExploit
added 2022/10/15 4:51 p.m.368 views

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affect...

9.8CVSS10AI score0.99984EPSS
SaveExploits25
GithubExploit
GithubExploit
added 2022/10/14 10:53 a.m.498 views

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 by 1vere$k For now it's a POC copy for CVE-202...

9.8CVSS9.1AI score0.99984EPSS
SaveExploits25
Talos
Talos
added 2022/10/14 12:00 a.m.61 views

Robustel R1510 web_server /action/import_authorized_keys/ OS command injection vulnerability

Talos Vulnerability Report TALOS-2022-1578 Robustel R1510 webserver /action/importauthorizedkeys/ OS command injection vulnerability October 14, 2022 CVE Number CVE-2022-34850 SUMMARY An OS command injection vulnerability exists in the webserver /action/importauthorizedkeys/ functionality of...

9.1CVSS7.3AI score0.03469EPSS
SaveExploits1
Wordfence Blog
Wordfence Blog
added 2022/10/13 9:08 p.m.287 views

Threat Advisory: CVE-2022-40684 Fortinet Appliance Auth bypass

This morning, the Wordfence Threat Intelligence team began tracking exploit attempts targeting CVE-2022-40684 on our network of over 4 million protected websites. CVE-2022-40684 is a critical authentication bypass vulnerability in the administrative interface of Fortinet’s FortiGate firewalls,...

9.8AI score0.99984EPSS
SaveExploits25
RedHat Linux
RedHat Linux
added 2022/10/13 7:14 p.m.57 views

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5.3 security fixes and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.5.3 General Availability release images, which fix security issues and bugs, as well as update container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS...

6.5CVSS6.6AI score0.00911EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2022/10/13 2:24 p.m.499 views

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet Forti...

9.8CVSS10AI score0.99984EPSS
SaveExploits25
NVD
NVD
added 2022/10/12 9:15 p.m.51 views

CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

7.5CVSS0.01463EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/12 9:15 p.m.44 views

CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

7.5CVSS7.6AI score
SaveExploits0References4
Prion
Prion
added 2022/10/12 9:15 p.m.38 views

Authentication flaw

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

5CVSS7.5AI score0.01463EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/10/12 9:15 p.m.70 views

CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

7.5CVSS7.1AI score0.01463EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2022/10/12 12:00 a.m.14 views

CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

7.8AI score0.01463EPSS
SaveExploits0References4
CVE
CVE
added 2022/10/12 12:00 a.m.480 views

CVE-2021-36369

CVE-2021-36369 affects Dropbear up to version 2020.81. The issue stems from a non-RFC-compliant check of available authentication methods in the client-side SSH code, allowing an SSH server to influence the login process, bypassing security measures such as FIDO2 tokens or SSH-Askpass, and enabli...

7.5CVSS7.4AI score0.01463EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2022/10/12 12:00 a.m.103 views

CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

7.5CVSS7.7AI score0.01463EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/10/12 12:00 a.m.5 views

PT-2022-10511 · Dropbear +3 · Dropbear +3

Name of the Vulnerable Software and Affected Versions: Dropbear versions through 2020.81 Description: An issue in the client-side SSH code allows an SSH server to change the login process in its favor due to a non-RFC-compliant check of available authentication methods. This can bypass additional...

10CVSS8AI score0.93305EPSS
SaveExploits4References36
Rows per page
Query Builder