Command injection

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the IP Address in Add Virtual Server...

CVE-2019-13154

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the TCP Ports To Open in Add Gaming Rule...

Command injection

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the IP Address in Add Gaming Rule...

Command injection

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the Private Port in Add Virtual Server...

CVE-2019-13153

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the Private Port in Add Virtual Server...

CVE-2019-13152

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the IP Address in Add Gaming Rule...

CVE-2019-13155

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the IP Address in Add Virtual Server...

CVE-2019-13155

TRENDnet TEW-827DRU firmware before 2.05B11 contains a command-injection vulnerability in apply.cgi exploitable with authentication via the IP Address in Add Virtual Server. Affected component: router firmware (TEW-827DRU). Root cause: input handling in Add Virtual Server allows execution of arbi...

CVE-2019-13152

CVE-2019-13152 affects TRENDnet TEW-827DRU firmware prior to 2.05B11. The issue is a command injection in the apply.cgi endpoint triggered via the IP Address field in Add Gaming Rule, exploitable with authentication. Public documents consistently describe the vulnerable component as apply.cgi and...

CVE-2019-13148

TRENDnet TEW-827DRU firmware prior to 2.05B11 is affected by a command-injection vulnerability in apply.cgi that is exploitable with authentication via the UDP Ports To Open in Add Gaming Rule. Several sources corroborate this issue. The vulnerability could allow execution of arbitrary commands o...

CVE-2019-13148

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the UDP Ports To Open in Add Gaming Rule...

CiuisCRM 1.6 - eventType SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================================================== Exploit Title: CiuisCRM 1.6 - 'eventType' SQL Inj. Exploit Author: Mehmet EMİROĞLU Vendor Homepage: https://codecanyon.net/item/ciuis-crm/20473489...

libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c

A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecuraddbydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7.1...

CVE-2019-2023

In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8....

Code injection

In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. This could allow an app to add or replace a HAL service with its own service, gaining code execution in a privileged process.Product: AndroidVersions: Android-8....

CVE-2018-17388

SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to logincheck.php, or the id parameter to addemail.php or editcontent.php...

Securifi Almond Command Injection Vulnerability

The Securifi Almond is a wireless router with a touch screen. A command injection vulnerability exists in the Add Routing feature in Securifi Almond, Almond+, and Almond 2015 using firmware version AL-R096, which can be exploited by an attacker to submit a malicious payload and take control of th...

Command injection

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way...

Pronestor Health Monitoring < 8.1.11.0 - Privilege Escalation

Summary The Pronestor service "PNHM" aka Health Monitoring or HealthMonitor before 8.1.12.0 has "BUILTIN\Users:IF" permissions for the "%PROGRAMFILESX86%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allows local users to gain privileges via a Trojan horse...

Pronestor Health Monitoring 8.1.11.0 - Privilege Escalation

Pronestor Health Monitoring 8.1.11.0 - Privilege Escalation Summary The Pronestor service "PNHM" aka Health Monitoring or HealthMonitor before 8.1.12.0 has "BUILTIN\Users:IF" permissions for the "%PROGRAMFILESX86%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allo...