An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.
CVE-2025-0282 is a critical stack-based buffer overflow vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA Gateways. This flaw allows unauthenticated remote attackers to execute arbitrary code remotely. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The CVSS 3.1 base score is 9.0, reflecting high complexity and severe impact on confidentiality, integrity, and availability.
CVE-2020-2883 is an unspecified vulnerability in Oracle WebLogic Server that can be exploited by unauthenticated attackers with network access via IIOP or T3 protocols. The vulnerability is known to be exploited in the wild. Oracle has released security patches addressing this and other vulnerabilities in their April 2020 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that can enable an attacker to achieve remote code execution on the affected system. Exploitation requires obtaining the MachineKey through another vulnerability or channel. This vulnerability is known to be exploited in the wild and is classified as high severity.
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected by this vulnerability if their php.ini configuration has `register_argc_argv` enabled. For these users an unspecified remote code execution vector is present. Users are advised to update to version 3.9.14, 4.13.2, or 5.5.2. Users unable to upgrade should disable `register_argc_argv` to mitigate the issue.
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
The Reolink RLC-410W IP camera has an authenticated OS command injection vulnerability in its network settings functionality. This vulnerability allows an attacker with valid credentials to execute arbitrary operating system commands on the device. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided.
Multiple Reolink IP camera models have an authenticated OS command injection vulnerability that allows an admin user to execute arbitrary commands as root via the 'TestEmail' feature. This vulnerability affects models including RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W. Exploitation requires authentication but can lead to full system compromise. The vulnerability is known to be exploited in the wild.
NUUO NVRmini2 devices have a missing authentication vulnerability that permits unauthenticated attackers to upload encrypted TAR archives. This flaw can be exploited to add arbitrary users to the device, potentially compromising device security. The vulnerability is classified as high severity and has been exploited in the wild. No specific affected versions or patch information is provided.
NUUO NVRmini devices have an OS command injection vulnerability identified as CVE-2018-14933. This flaw allows remote attackers to execute arbitrary commands on the device by injecting shell metacharacters into the uploaddir parameter of the writeuploaddir command. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
CVE-2024-35250 is a high-severity vulnerability in the Microsoft Windows Kernel-Mode Driver involving an untrusted pointer dereference. This flaw allows a local attacker to escalate privileges on the affected system. It has been confirmed exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2024-55956 affects Cleo Harmony, VLTrader, and LexiCom products prior to version 5.8.0.24. The vulnerability allows an unauthenticated attacker to import and execute arbitrary Bash or PowerShell commands on the host system by exploiting the default settings of the Autorun directory. This can lead to full system compromise. The vulnerability has a critical CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns.
CVE-2024-50623 is a critical vulnerability affecting multiple Cleo managed file transfer products including Cleo Harmony, VLTrader, and LexiCom. It involves unrestricted file upload and download capabilities that can be exploited to achieve remote code execution with elevated privileges. The vulnerability has a CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns.
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
CVE-2024-49138 is a heap-based buffer overflow vulnerability in the Microsoft Windows Common Log File System (CLFS) driver. It allows a local attacker to escalate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8 and has been exploited in the wild. No specific affected Windows versions or patch information are provided in the available data.
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
ProjectSend has an improper authentication vulnerability that allows remote, unauthenticated attackers to modify application configuration via crafted HTTP requests to options.php. Exploitation enables attackers to create accounts, upload webshells, and embed malicious JavaScript, leading to potential full compromise. This vulnerability is actively exploited in the wild. No specific affected versions or patch information is provided yet.
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
