remote code execution

Urgent Warning: Multiple Critical Vulnerabilities in RTOS VxWorks

by
Urgent Warning: Multiple Critical Vulnerabilities in RTOS VxWorks

0x00 Background Researchers at Armis have discovered 11 zero-day vulnerabilities in VxWorks, the most popular real-time operating system (RTOS), used by over 2 billion devices, including critical mission devices in industrial, medical, and enterprise settings. These vulnerabilities, referred to as ‘URGENT / 11′, exist in IPnet, VxWorks’ TCP/IP stack, affecting versions released over the past … Read more

Apache HTTP Server Path Traversal Vulnerability

by
Apache HTTP Server Path Traversal Vulnerability

Apache HTTP Server Path Traversal Vulnerability (CVE-2021-41773) 1. Vulnerability Overview CVE-2021-41773 is a high-risk path traversal vulnerability present in Apache HTTP Server version 2.4.49. Attackers can exploit this vulnerability to bypass the server’s path access restrictions and read or execute arbitrary files on the target server. If the server is configured to allow the execution … Read more