6892 matches found
TP-Link T2600G-28SQ Unauthorized Access
The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software is related to errors in managing registration data when processing SSH keys. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
NSSwitch Oracle Solaris Input Error
The vulnerability of the NSSwitch component in the Oracle Solaris operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
FS-S3900-24T4S security vulnerabilities
The FS-S3900-24T4S is a switch from FS. A security vulnerability exists in the FS-S3900-24T4S that stems from the presence of privilege escalation...
FS-S3900-24T4S - Privilege Escalation
Exploit Title: FS-S3900-24T4S Privilege Escalation Date: 29/04/2023 Exploit Author: Daniele Linguaglossa & Alberto Bruscino Vendor Homepage: https://www.fs.com/ Software Link: not available Version: latest Tested on: latest CVE : CVE-2023-30350 import sys import telnetlib def exploitargs: printar...
Maintenance Switch <= 1.5.2 - Reflected XSS
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)
Software Maintenance Switch Type Plugin Vulnerable versions = 1.5.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47590 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 56383f0b4655 Credits minhtuanact Required...
CVE-2023-24512
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...
Design/Logic Flaw
On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...
CVE-2023-28088
An HPE OneView appliance dump may expose SAN switch administrative credentials...
CVE-2023-28088
An HPE OneView appliance dump may expose SAN switch administrative credentials...
Command injection
An HPE OneView appliance dump may expose SAN switch administrative credentials...
CVE-2023-28088
An HPE OneView appliance dump may expose SAN switch administrative credentials...
CVE-2023-28088
An HPE OneView appliance dump may expose SAN switch administrative credentials...
CVE-2023-28088
The CVE-2023-28088 issue affects HPE OneView appliances, stemming from an appliance dump that could expose SAN switch administrative credentials. Documented details show a CVSSv3.1 base score of 7.8 (HIGH), with local attack vector, low attack complexity, and privileges required as LOW; user inte...
CVE-2023-29779
Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...
CVE-2023-29779
Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...
Command injection
Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...
PT-2023-21547 · Hewlett Packard · Hpe Oneview
Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns an HPE OneView appliance dump that may expose SAN switch administrative credentials. Recommendations: At the moment, there is no information about a newer version tha...
CVE-2023-29779
Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...
