CVE-2020-3259 is an information disclosure vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) affecting certain AnyConnect and WebVPN configurations. The flaw allows an attacker to retrieve memory contents due to a buffer tracking issue when parsing invalid URLs via the web services interface. This could lead to exposure of confidential information. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2018-15133 is a high-severity vulnerability in the Laravel Framework involving deserialization of untrusted data. It allows remote command execution but requires that an attacker has access to the application's encryption key (APP_KEY). This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
D-Link DSL-2750B devices have a command injection vulnerability that permits remote, unauthenticated attackers to execute arbitrary commands via the login.cgi cli parameter. This vulnerability is known to be exploited in the wild, posing a significant risk to affected devices.
Multiple Qualcomm chipsets have a use-after-free vulnerability triggered during process initialization when shell memory is freed via an IOCTL munmap call. This vulnerability has been exploited in the wild and is rated as high severity.
CVE-2020-2551 is an unspecified vulnerability in Oracle Fusion Middleware's WebLogic Server core components. It allows an unauthenticated attacker with network access via the IIOP protocol to compromise the WebLogic Server. The vulnerability has been exploited in the wild. Oracle released patches for this and other vulnerabilities in their January 2020 Critical Patch Update and strongly recommends applying these patches promptly.
CVE-2018-14667 is a high severity expression language injection vulnerability in the Red Hat JBoss RichFaces Framework. It affects the UserResource resource, allowing a remote, unauthenticated attacker to execute malicious code by exploiting a chain of Java serialized objects. This vulnerability has been observed in the wild.
CVE-2023-28434 is a security feature bypass vulnerability in MinIO that allows attackers with specific permissions to bypass bucket name checks and place objects into arbitrary buckets, enabling privilege escalation. Exploitation requires credentials with arn:aws:s3:::* permission and enabled Console API access. This vulnerability has been exploited in the wild.
A use-after-free vulnerability exists in Samsung mobile devices with selected Exynos chipsets. This flaw allows malicious actors to perform unauthorized memory writes and potentially execute arbitrary code on affected devices. The vulnerability has been exploited in the wild. No specific affected software versions or patches have been provided in the available data.
CVE-2014-8361 is a high-severity vulnerability in the Realtek SDK's miniigd SOAP service caused by improper input validation. This flaw allows remote attackers to execute arbitrary code by sending a specially crafted NewInternalClient request. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Zyxel EMG2926 routers have a command injection vulnerability in the diagnostic nslookup function. This flaw allows attackers to execute arbitrary commands on the device by manipulating parameters such as ping_ip in the diagnostic URI. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2021-3129 is a high-severity vulnerability in Laravel Ignition that allows unauthenticated remote attackers to execute arbitrary code by exploiting insecure file upload handling. The flaw arises from improper use of file_get_contents() and file_put_contents() functions, enabling malicious file uploads. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
Zyxel P660HN-T1A routers have a command injection vulnerability in the Remote System Log forwarding feature. This flaw is exploitable by unauthenticated users via the remote_host parameter on the ViewLog.asp page. The vulnerability has been exploited in the wild and is considered high severity.
SolarView Compact contains a command injection vulnerability in the send test mail console of its web server due to improper input validation. This flaw allows attackers to execute arbitrary commands on the affected system. The vulnerability is known to be exploited in the wild, increasing its risk. No specific affected versions or patch information is provided.
CVE-2022-31199 is an insecure object deserialization vulnerability in the Netwrix Auditor User Activity Video Recording component. It allows an unauthenticated remote attacker to execute code with NT AUTHORITY\SYSTEM privileges if they can reach port 9004/TCP. This port is commonly blocked by enterprise firewalls. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
CVE-2021-29256 is a use-after-free vulnerability in the Arm Mali GPU Kernel Driver that may allow a non-privileged user to gain root privileges or disclose sensitive information. This vulnerability has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information is provided in the available data.
The D-Link DIR-859 router has a command execution vulnerability in its UPnP service at the /gena.cgi endpoint. An unauthenticated remote attacker on the local network can exploit this flaw by sending a specially crafted HTTP SUBSCRIBE request, allowing execution of system commands with root privileges. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2019-20500 is an authenticated command injection vulnerability in the D-Link DWL-2600AP access point. It occurs via the Save Configuration functionality in the web interface, where shell metacharacters can be injected through the admin.cgi?action=config_save configBackup or downloadServerip parameters. This vulnerability has been exploited in the wild.
CVE-2021-25487 is an out-of-bounds read vulnerability in Samsung mobile devices affecting the modem interface driver. It arises from insufficient boundary checking in the set_skb_priv() function, which can lead to remote code execution by dereferencing an invalid function pointer. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
Samsung mobile devices have an improper input validation vulnerability in the modem interface driver. This flaw is a format string bug that can cause a kernel panic. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Samsung mobile devices have a race condition vulnerability in the MFC charger driver that can lead to a use-after-free condition, enabling a write operation if radio privileges are compromised. This vulnerability has been exploited in the wild.