disclosures@exodusintel.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS disclosures@exodusintel.com
03
assessed vulnerabilities (37)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-24623US | high8.8 | — | ||
Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticated attacker can exploit this vulnerability to gain code exec… | ||||
| CVE-2024-24622US | high8.8 | — | ||
Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the s… | ||||
| CVE-2024-24621US | critical9.8 | — | ||
Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full… | ||||
| CVE-2024-23630US | high8.8 | — | ||
An arbitrary firmware upload vulnerability exists in the Motorola
MR2600. An attacker can exploit this vulnerability to achieve code
execution on the device. Authentication is re… | ||||
| CVE-2024-23629US | high7.5OT elevated | — | ||
An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitiv… | ||||
| CVE-2024-23628US | high8.8 | — | ||
A command injection vulnerability exists in the
'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote
attacker can exploit this vulnerability to achieve command… | ||||
| CVE-2024-23627US | high8.8 | — | ||
A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command ex… | ||||
| CVE-2024-23626US | high8.8 | — | ||
A command injection vulnerability exists in the ‘SaveSysLogParams’
parameter of the Motorola MR2600. A remote attacker can exploit this
vulnerability to achieve command execution… | ||||
| CVE-2024-23625US | critical9.8 | — | ||
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain comman… | ||||
| CVE-2024-23624US | critical9.8 | — | ||
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on… | ||||
| CVE-2024-23622US | critical9.8 | — | ||
A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote c… | ||||
| CVE-2024-23621US | critical9.8 | — | ||
A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code executio… | ||||
| CVE-2024-23620US | high7.8 | — | ||
An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileg… | ||||
| CVE-2024-23619US | critical9.8OT elevated | — | ||
A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disc… | ||||
| CVE-2024-23618US | critical9.8OT elevated | — | ||
An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root… | ||||
| CVE-2024-23617US | high8.8 | — | ||
A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a u… | ||||
| CVE-2024-23616US | critical9.8 | — | ||
A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote cod… | ||||
| CVE-2024-23615US | critical9.8 | — | ||
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code ex… | ||||
| CVE-2024-23614US | critical9.8 | — | ||
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code exe… | ||||
| CVE-2024-23613US | critical9.8 | — | ||
A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability t… | ||||