Ansible Arbitrary Command Execution Vulnerability (CNVD-2017-10546)

Ansible is a computer system configuration manager from Ansible, Inc. that can be used to publish, manage and orchestrate computer systems. An arbitrary command execution vulnerability exists in the user module in versions of Ansible prior to 1.6.6. A remote attacker can exploit this vulnerabilit...

Foscam camera remote command injection vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. Foscam camera has a remote command injection vulnerability in the modelName in the /mnt/mtd/app/config/ProductConfig.xml file. By installing the ProductConfig.xml file in...

PT-2018-28: Arbitrary Command Execution in Cisco Secure ACS

The specialists of the Positive Research center have detected an Arbitrary Command Execution vulnerability in Cisco Secure ACS. A vulnerability in Cisco Secure Access Control System ACS, due to insecure Java deserialization of user-supplied content, allows an unauthenticated, remote attacker to...

PT-2018-27: Arbitrary Command Execution in Cisco Secure ACS

The specialists of the Positive Research center have detected an Arbitrary Command Execution vulnerability in Cisco Secure ACS. A vulnerability in Cisco Secure Access Control System ACS, due to insufficient validation of the Action Message Format AMF protocol, allows unauthenticated, remote...

Smb4K: Arbitrary command execution as root

Background Smb4K is a SMB/CIFS Windows share browser for KDE. Description Smb4k contains a logic flaw in which mount helper binary does not properly verify the mount command it is being asked to run. Impact A local user can execute commands with the root privilege due to the mount helper being...

GLSA-201705-14 : Smb4K: Arbitrary command execution as root

The remote host is affected by the vulnerability described in GLSA-201705-14 Smb4K: Arbitrary command execution as root Smb4k contains a logic flaw in which mount helper binary does not properly verify the mount command it is being asked to run. Impact : A local user can execute commands with the...

QNAP QTS Arbitrary Command Execution Vulnerability (CNVD-2017-10394)

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. An arbitrary command execution vulnerability exists in QNAP QTS. An attacker could use this vulnerability to execute arbitrary command...

QNAP QTS Arbitrary Command Execution Vulnerability (CNVD-2017-10393)

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. An arbitrary command execution vulnerability exists in QNAP QTS. An attacker could use this vulnerability to execute arbitrary command...

Dell iDRAC6 Arbitrary Command Execution Vulnerability (CNVD-2017-09907)

Dell iDRAC6 is a remote management solution on the Dell PowerEdge family of servers. An arbitrary command execution vulnerability exists in Dell iDRAC6. An attacker could exploit this vulnerability to execute arbitrary commands in the context of an affected application, leading to further attacks...

Sierra Wireless GX440 Command Injection Vulnerability (CNVD-2017-10181)

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. The Sierra Wireless GX440 suffers from a command injection vulnerability that can be exploited by a remote attacker to submit a special request and execute arbitrary commands...

Arbitrary Command Execution

windows-cpu is vulnerable to arbitrary command execution. This is because the findLoad method doesn't sanitize or perform any validation before passing user-input to the shell...

The vulnerability of the microprogramming software in the access control system for the NetScaler Gateway allows a intruder to execute any command they desire.

The vulnerability of the microprogramming software in the access control system for the NetScaler Gateway lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using uncertain vectors...

Eir D1000 Arbitrary Command Execution Vulnerability

The Eir D1000 is a modem from Eir Ireland. A security vulnerability exists in the Eir D1000 modem that stems from the program failing to properly restrict the TR-064 protocol. A remote attacker can exploit the vulnerability to execute arbitrary commands on TCP port 7547...

Debian DLA-941-1 : squirrelmail security update

Dawid Golunski and Filippo Cavallarin discovered that squirrelmail, a webmail application, incorrectly handled a user-supplied value. This would allow a logged-in user to run arbitrary commands on the server. For Debian 7 'Wheezy', these problems have been fixed in version...

[ASA-201705-18] libplist: multiple issues

Arch Linux Security Advisory ASA-201705-18 ========================================== Severity: High Date : 2017-05-16 CVE-ID : CVE-2017-5209 CVE-2017-5545 CVE-2017-5834 CVE-2017-5835 CVE-2017-5836 CVE-2017-6435 CVE-2017-6436 CVE-2017-6437 CVE-2017-6438 CVE-2017-6439 CVE-2017-6440 Package :...

[SECURITY] [DSA 3853-1] bitlbee security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3853-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 15, 2017 https://www.debian.org/security/faq -...

NovaBACKUP DataCenter Linux datamover module arbitrary command execution vulnerability

NovaBACKUP DataCenter is a data backup solution developed by NovaStor Germany, Linux is the operating system, datamover module is one of the data transfer module. A security vulnerability exists in the datamover module of NovaBACKUP DataCenter 09.06.03.0353 and earlier versions for Linux. A remot...

Ghostscript Type Confusion Arbitrary Command Execution (CVE-2017-8291)

An arbitrary code execution vulnerability exists within Ghostscript. This vulnerability is due to the way Ghostscript parses .eps files. An attacker can manipulate a .eps file and run arbitrary commands on the victims computer...

Netgear WNR2000\R2000 Series Buffer Overflow Vulnerability

The WNR2000v3, WNR2000v4, WNR2000v5 and R2000 are all router products from Netgear. A buffer overflow vulnerability exists in the Netgear WNR2000\R2000 family of products, which can be exploited by remote attackers to bypass authentication and execute arbitrary commands...

Arbitrary Command Execution

smalruby-editor is vulnerable to arbitrary OS command injection attacks. The vulnerability exists due to the improper input sanitization in the usage of Open3.capture3...