CVE-2022-23410

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same...

PT-2022-15982 · Axis · Axis Ip Utility

Name of the Vulnerable Software and Affected Versions: AXIS IP Utility versions prior to 4.18.0 Description: The issue allows for remote code execution and local privilege escalation through DLL hijacking. IPUtility.exe attempts to load DLLs from its current working directory, which could allow f...

AXIS IP Utility code-related vulnerabilities

Axis Ip Utility is used by Axis of Sweden to help set the Ip address of Axis network video products. AXIS IP Utility has a code issue vulnerability that stems from AXIS IP Utility allowing remote code execution and local privilege escalation via DLL hijacking...

CVE-2022-23410: Uncontrolled Search Path Element

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same...

Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware

A Windows living-off-the-land binary LOLBin known as Regsvr32 is seeing a big uptick in abuse of late, researchers are warning, mainly spreading trojans like Lokibot and Qbot. LOLBins are legitimate, native utilities used daily in various computing environments, that cybercriminals use to evade...

AlmaLinux 8 : exiv2 (ALSA-2021:4173)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4173 advisory. - A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata ...

AlmaLinux 8 : java-11-openjdk (ALSA-2021:3891)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3891 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java...

AlmaLinux 8 : java-1.8.0-openjdk (ALSA-2021:3893)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3893 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java...

Important: Red Hat Security Advisory: aide security update

An update for aide is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Arbitrary file deletion

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible...

CVE-2022-23329

A vulnerability in $"freemarker.template.utility.Execute"?new of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files...

Bluffy - Convert Shellcode Into Different Formats!

Bluffy is a utility which was used in experiments to bypass Anti-Virus products statically by formatting shellcode into realistic looking data formats. Proof-of-concept tools, such as 0xBoku's NinjaUUIDRunner and ChoiSG's UuidShellcodeExec, inspired the initial concept for Bluffy. So far, we...

CVE-2022-23031

On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML External Entity XXE vulnerability exists in an undisclosed page of the F5 Advanced Web Application Firewall Advanced WAF and BIG-IP ASM Traffic Management User Interface...

CVE-2022-23013

On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute...

CVE-2022-23013

On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute...

PT-2022-15781

Name of the Vulnerable Software and Affected Versions BIG-IP DNS & GTM versions 11.6.x BIG-IP DNS & GTM versions 12.1.x BIG-IP DNS & GTM versions 13.1.x BIG-IP DNS & GTM versions 14.1.x through 14.1.4.3 BIG-IP DNS & GTM versions 15.1.x through 15.1.3 BIG-IP DNS & GTM versions 16.x through 16.0.x...

CVE-2022-23013: Improper Neutralization of Input During Web Page Generation

On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute...

PT-2022-1411

Name of the Vulnerable Software and Affected Versions polkit versions prior to 0.105-25+deb10u1 buster polkit versions prior to 0.105-31+deb11u1 bullseye polkit affected versions not specified Description A local privilege escalation issue exists in the pkexec utility of polkit, a setuid tool tha...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2022-1561)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.312.b07-0.65. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1561 advisory. Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component:...

sound output utility Path Traversal

The vulnerability of the sound output utility, which uses the computer’s built-in speaker for beeping, is related to deficiencies in path name restriction. Exploiting this vulnerability could allow a hacker to cause a service failure...