Lucene search
+L

523 matches found

OSV
OSV
added 2024/01/15 2:15 p.m.3 views

CVE-2023-4818

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...

7.6CVSS5.8AI score0.00663EPSS
SaveExploits1References4
Prion
Prion
added 2024/01/15 2:15 p.m.12 views

Design/Logic Flaw

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...

4.6CVSS6.8AI score0.00663EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2024/01/15 1:28 p.m.56 views

CVE-2023-4818

CVE-2023-4818 affects PAX A920 bootloader downgrade due to a bug in the version check. The signature check remains intact and only bootloaders signed by PAX are accepted. Exploitation requires physical USB access to the device. The connected documents confirm the vulnerability and its physical-ac...

7.6CVSS7.3AI score0.00663EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/01/15 1:28 p.m.25 views

CVE-2023-4818

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...

7.4AI score0.00663EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/01/15 12:0 a.m.10 views

PAX Technology A920 Injection Vulnerability

PAX Technology A920 is an Android mobile payment terminal from PAX Technology. The PAX Technology A920 suffers from a security vulnerability that originates from a version checking error, which can be exploited by an attacker to steer the loader to downgrade to a vulnerable version, leading to...

7.6CVSS7.4AI score0.00663EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2024/01/10 12:0 a.m.16 views

Synology DiskStation Manager (DSM) ACE Vulnerability (Synology-SA-24:01) - Unreliable Remote Version Check

Synology DiskStation Manager DSM is prone to an arbitrary code execution ACE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

7.7AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2023/12/10 8:32 a.m.904 views

Exploit for Injection in Vm2_Project Vm2

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerabili...

10CVSS9.7AI score0.72087EPSS
SaveExploits5
Citrix
Citrix
added 2023/11/29 12:0 a.m.10 views

Expression for EPA scan to check for version Win 11

Run EPA scan to check Win 11...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/11/23 12:0 a.m.18 views

Synology Router Manager (SRM) 1.2.x < 1.2.5-8227-11, 1.3.x < 1.3.1-9346-8 Multiple Vulnerabilities (Synology-SA-23:16) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS6.4AI score0.00523EPSS
SaveExploits0References1
Citrix
Citrix
added 2023/10/24 12:0 a.m.21 views

How To: Check if HTTP/2 is being used in the NetScaler, and if so by which entities

...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/10/13 12:0 a.m.24 views

F5 Networks BIG-IP : BIG-IP iControl REST Privilege Escalation (K26910459)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.9. It is, therefore, affected by a vulnerability as referenced in the K26910459 advisory. The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database DB variables. Not...

7.2CVSS7.1AI score0.00533EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/09/29 12:0 a.m.5 views

Synology Router Manager (SRM) 1.2.x < 1.2.5-8227-10, 1.3.x < 1.3.1-9346-7 Security Bypass Vulnerability (Synology-SA-23:10) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.3AI score
SaveExploits0References1
Citrix
Citrix
added 2023/09/04 12:0 a.m.8 views

How to check jQuery version that used by NetScaler Gateway

NetScaler jQuery version check method...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/07/28 12:0 a.m.26 views

Synology Router Manager (SRM) 1.3.x < 1.3.1-9346-6 Multiple Vulnerabilities (Synology-SA-23:10) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.8AI score0.01491EPSS
SaveExploits0References1
Huntr
Huntr
added 2023/06/27 5:32 p.m.14 views

Exposure version installed on the system

Description Users can check the version of Admidio installed on the system. Proof of Concept Go to http:///admprogram/modules/preferences/updatecheck.php?mode=2 Acknowledge Tran Van Nhan from bl4ckh0l3 of GalaxyOne...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/06/20 12:0 a.m.98 views

Synology DiskStation Manager (DSM) 6.2.x Multiple Vulnerabilities (Synology-SA-22:23) - Unreliable Remote Version Check

Synology DiskStation Manager DSM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS7.8AI score0.00586EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/06/19 12:0 a.m.19 views

Synology Router Manager (SRM) 1.1.x Multiple Vulnerabilities (Synology-SA-18:34) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9CVSS7.8AI score0.02308EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/06/19 12:0 a.m.20 views

Synology Router Manager (SRM) 1.1.x Multiple Vulnerabilities (Synology-SA-18:48) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to multiple information exposure vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS4.9AI score0.01591EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/06/19 12:0 a.m.17 views

Synology Router Manager (SRM) 1.2.x, 1.3.x Use of Insufficiently Random Values Vulnerability (Synology-SA-23:08) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to an use of insufficiently random values vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

7.5CVSS7.7AI score0.00875EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/06/16 12:0 a.m.12 views

Synology Router Manager (SRM) 1.1.x Path Traversal Vulnerability (Synology-SA-17:71) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.5CVSS6.5AI score0.01972EPSS
SaveExploits0References1
Rows per page
Query Builder