Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated attacker to create an account with privilege level 15 access. The attacker can then use that account to gain control of the affected device.
CVE-2018-14667 is a high severity expression language injection vulnerability in the Red Hat JBoss RichFaces Framework. It affects the UserResource resource, allowing a remote, unauthenticated attacker to execute malicious code by exploiting a chain of Java serialized objects. This vulnerability has been observed in the wild.
CVE-2023-28434 is a security feature bypass vulnerability in MinIO that allows attackers with specific permissions to bypass bucket name checks and place objects into arbitrary buckets, enabling privilege escalation. Exploitation requires credentials with arn:aws:s3:::* permission and enabled Console API access. This vulnerability has been exploited in the wild.
A use-after-free vulnerability exists in Samsung mobile devices with selected Exynos chipsets. This flaw allows malicious actors to perform unauthorized memory writes and potentially execute arbitrary code on affected devices. The vulnerability has been exploited in the wild. No specific affected software versions or patches have been provided in the available data.
CVE-2014-8361 is a high-severity vulnerability in the Realtek SDK's miniigd SOAP service caused by improper input validation. This flaw allows remote attackers to execute arbitrary code by sending a specially crafted NewInternalClient request. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2021-3129 is a high-severity vulnerability in Laravel Ignition that allows unauthenticated remote attackers to execute arbitrary code by exploiting insecure file upload handling. The flaw arises from improper use of file_get_contents() and file_put_contents() functions, enabling malicious file uploads. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
Zyxel EMG2926 routers have a command injection vulnerability in the diagnostic nslookup function. This flaw allows attackers to execute arbitrary commands on the device by manipulating parameters such as ping_ip in the diagnostic URI. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
Zyxel P660HN-T1A routers have a command injection vulnerability in the Remote System Log forwarding feature. This flaw is exploitable by unauthenticated users via the remote_host parameter on the ViewLog.asp page. The vulnerability has been exploited in the wild and is considered high severity.
SolarView Compact contains a command injection vulnerability in the send test mail console of its web server due to improper input validation. This flaw allows attackers to execute arbitrary commands on the affected system. The vulnerability is known to be exploited in the wild, increasing its risk. No specific affected versions or patch information is provided.
CVE-2022-31199 is an insecure object deserialization vulnerability in the Netwrix Auditor User Activity Video Recording component. It allows an unauthenticated remote attacker to execute code with NT AUTHORITY\SYSTEM privileges if they can reach port 9004/TCP. This port is commonly blocked by enterprise firewalls. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
CVE-2021-29256 is a use-after-free vulnerability in the Arm Mali GPU Kernel Driver that may allow a non-privileged user to gain root privileges or disclose sensitive information. This vulnerability has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information is provided in the available data.
Samsung mobile devices have a vulnerability in the DSP driver due to improper boundary checks, which allows out-of-bounds memory access. This flaw has been exploited in the wild. No specific affected versions or patches are provided in the available data.
The D-Link DIR-859 router has a command execution vulnerability in its UPnP service at the /gena.cgi endpoint. An unauthenticated remote attacker on the local network can exploit this flaw by sending a specially crafted HTTP SUBSCRIBE request, allowing execution of system commands with root privileges. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2019-20500 is an authenticated command injection vulnerability in the D-Link DWL-2600AP access point. It occurs via the Save Configuration functionality in the web interface, where shell metacharacters can be injected through the admin.cgi?action=config_save configBackup or downloadServerip parameters. This vulnerability has been exploited in the wild.
CVE-2021-25487 is an out-of-bounds read vulnerability in Samsung mobile devices affecting the modem interface driver. It arises from insufficient boundary checking in the set_skb_priv() function, which can lead to remote code execution by dereferencing an invalid function pointer. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
Samsung mobile devices have an improper input validation vulnerability in the modem interface driver. This flaw is a format string bug that can cause a kernel panic. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Samsung mobile devices have a race condition vulnerability in the MFC charger driver that can lead to a use-after-free condition, enabling a write operation if radio privileges are compromised. This vulnerability has been exploited in the wild.
Samsung mobile devices have a race condition vulnerability in the MFC charger driver that can lead to a use-after-free condition. This vulnerability allows a write operation if the attacker has compromised radio privileges. It has been exploited in the wild and is considered a high severity issue.
Samsung mobile devices have an unspecified vulnerability in the DSP driver that permits attackers to load ELF libraries inside the DSP. This vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.