599 matches found
KB5042322: Windows Recovery Environment update for Windows Server 2022: January 9, 2024
None None...
Applying Security Hotfixes to XenServer on NetScaler SDX Appliance with Software Release 9.3 and 10
This article describes how to apply the hotfixes required to remediate the security vulnerabilities detailed in security bulletin CTX134876 -Citrix NetScaler SDX Multiple Security Updates. Determining the Version of XenServer on the NetScaler SDX Appliance To determine what version of XenServer y...
CVE-2024-35913 wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pick the version of SESSIONPROTECTIONNOTIF When we want to know whether we should look for the macid or the linkid in struct iwlmvmsessionprotnotif, we should look at the version of SESSIONPROTECTIONNOTIF. Thi...
Exploit for Deserialization of Untrusted Data in Apache Kafka_Connect
Apache Druid CVE-2023-25194 CVE-2023-25194 is a deserializati...
BioTime Directory Traversal / Remote Code Execution
. . \ | \ /|| | | / |/ | | | |/ / \ | | \ | | | Y Y \ / | /|/|| |||| /\ / / / Tested on 8.5.5 Build:20231103.R1905 Tested on 9.0.1 Build:20240108.18753 BioTime, "time" for shellz! https://claroty.com/team82/disclosure-dashboard/cve-2023-38952...
Curl 8.6.0 < 8.7.0 QUIC Certificate Check Bypass (CVE-2024-2379)
The version of Curl installed on the remote host is between 8.6.0 and prior to 8.7.0. It is, therefore, affected by a certificate check bypass vulnerability. libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an...
BIT-MATTERMOST-2022-1384
Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities...
Microsoft Visio 2016 Remote Code Execution Vulnerability (KB5002491)
This host is missing an important security update according to Microsoft KB5002491 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
QNAP QTS Multiple OS Command Injection Vulnerabilities (QSA-23-57) - Version Check
QNAP QTS is prone to multiple OS command injection vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...
QNAP QuTS hero Multiple OS Command Injection Vulnerabilities (QSA-23-57) - Version Check
QNAP QuTS hero is prone to multiple OS command injection vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fortra GoAnywhere MFT Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortra GoAnywhere MFT Unauthenticated Remote Code Execution', 'Description' = %q This module exploits a vulnerability in Fortra GoAnywhere MFT th...
Synology DiskStation Manager (DSM) Open Redirect Vulnerability (Synology-SA-24:02) - Unreliable Remote Version Check
Synology DiskStation Manager DSM is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2023-4818
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
Design/Logic Flaw
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
CVE-2023-4818
CVE-2023-4818 affects PAX A920 bootloader downgrade due to a bug in the version check. The signature check remains intact and only bootloaders signed by PAX are accepted. Exploitation requires physical USB access to the device. The connected documents confirm the vulnerability and its physical-ac...
CVE-2023-4818
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
CVE-2023-4818: Improper Neutralization of Special Elements in Output Used by a Downstream Component
PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...
PAX Technology A920 Injection Vulnerability
PAX Technology A920 is an Android mobile payment terminal from PAX Technology. The PAX Technology A920 suffers from a security vulnerability that originates from a version checking error, which can be exploited by an attacker to steer the loader to downgrade to a vulnerable version, leading to...
Synology DiskStation Manager (DSM) ACE Vulnerability (Synology-SA-24:01) - Unreliable Remote Version Check
Synology DiskStation Manager DSM is prone to an arbitrary code execution ACE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...