USN-6195-1 vim vulnerabilities

It was discovered that Vim contained an out-of-bounds read vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2022-0128 It was discovered that Vim did not properly manage memory when freeing allocated memory. An attacker could...

CVE-2023-36144

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration...

Authentication flaw

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration...

CVE-2023-36144

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration...

CVE-2023-36144

Intelbras Switch SG 2404 MR (firmware 1.00.54) is affected by an authentication bypass that lets an unauthenticated attacker download the device backup file, exposing configuration data (credentials, network settings). The vulnerability is documented across multiple sources (CVE-2023-36144) with ...

PT-2023-25454 · Intelbras · Intelbras Switch Sg 2404 Mr

Name of the Vulnerable Software and Affected Versions: Intelbras Switch SG 2404 MR version 1.00.54 Description: The issue is related to an authentication bypass that allows an unauthenticated attacker to download the device's backup file, exposing critical configuration information...

CVE-2023-36144

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration...

Moment.js: Path traversal in moment.locale

A path traversal vulnerability was found in Moment.js that impacts npm server users. This issue occurs if a user-provided locale string is directly used to switch moment locale, which an attacker can exploit to change the correct path to one of their choice. This can result in a loss of integrity...

Exploit for Missing Authorization in Intelbras Sg_2404_Mr_Firmware

CVE-2023-36144 PoC of CVE-2023-36144 - Intelbras Switch SG 24...

Interlink PSG-5124 安全漏洞

The Interlink PSG-5124 is a switch from Interlink. A security vulnerability exists in the Interlink PSG-5124 version 1.0.4 that stems from the presence of an incorrect access control issue that allows an attacker to execute arbitrary code via a crafted GET request...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

Design/Logic Flaw

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

CVE-2023-34596

CVE-2023-34596 concerns the Aeotec WallMote Switch, firmware v2.3. Several connected sources confirm a vulnerability that allows a crafted Z-Wave message to cause a Denial of Service. Affected component: WallMote Switch firmware 2.3. Reported impact is Availability disruption (DoS); attack vector...

Aeotec WallMote Switch 安全漏洞

Aeotec WallMote Switch is a switch from Aeotec. Aeotec WallMote Switch version v2.3 has a security vulnerability that stems from allowing an attacker to cause a denial of service DoS on the system via a specially crafted Z-Wave message...

CVE-2023-34596

A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message...

PT-2023-24937 · Aeotec · Aeotec Wallmote Switch

Name of the Vulnerable Software and Affected Versions: Aeotec WallMote Switch version 2.3 Description: A vulnerability in the Aeotec WallMote Switch allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message. Recommendations: For Aeotec WallMote Switch version 2.3, at the...

Desktop APP RCE via saveDraft IPC

🔒️ Requirements The user must load a malicious project. 📝 Description In version 20.3.3 commit 5383c20e947fd772668316e407edc5d5db4850db, the shell=true option is added to a spawn execution. This is really dangerous has it allows a malicious user to execute commands even from attributes. Example: j...

PT-2023-3234 · Fortinet · Fortiproxy +2

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4.12 and earlier, 7.0.0 through 7.0.9 FortiOS versions 7.2.0 through 7.2.3 FortiProxy versions 7.0.0 through 7.0.7 FortiProxy versions 7.2.0 through 7.2.1 FortiSwitchManager versions 7.0.0 through 7.0.1 and earlier...