CVE-2022-48074: Undefined Security Weakness

An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...

CVE-2023-24153

Summary of CVE-2023-24153 (TOTOLINK T8) : A command injection vulnerability exists in the version parameter of the function recvSlaveCloudCheckStatus on TOTOLINK T8 firmware version V4.1.5cu. The underlying issue is improper handling of construct characters in the version parameter, enabling an a...

NoMachine security vulnerabilities

NoMachine is a remote desktop access tool from NoMachine Luxembourg. A security vulnerability exists in NoMachine versions prior to v8.2.3, which can be exploited by an attacker to execute arbitrary commands via a crafted .nxs file...

TOTOLINK T8 Command Injection Vulnerability

TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. The TOTOLINK T8 suffers from a command injection vulnerability that stems from the serverIp parameter of the meshSlaveDlfw method failing to properly filter constructed command special...

TOTOLINK T8 Command Injection Vulnerability

TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. TOTOLINK T8 suffers from a command injection vulnerability that stems from the ip parameter of the recvSlaveCloudCheckStatus method failing to correctly filter constructed command special...

TOTOLINK T8 Command Injection Vulnerability

TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. TOTOLINK T8 suffers from a command injection vulnerability that stems from the serverIp parameter of the meshSlaveUpdate method failing to properly filter construct command special...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ctags (SUSE-SU-2023:0225-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0225-1 advisory. - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename bsc1206543. Tenabl...

SUSE SLES12 Security Update : ctags (SUSE-SU-2023:0224-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0224-1 advisory. - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename bsc1206543. Tenable has extracted the preceding...

TRENDnet TEW-811DRU command injection vulnerability

TRENDnet TEW-811DRU is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-811DRU web interface component ping.ccp, which can be exploited by remote attackers to submit ad hoc requests and execute arbitrary commands...

D-Link DIR-846: Operating System Command Injection Vulnerability

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. The D-Link DIR-846 is vulnerable to a command execution vulnerability that could be exploited by attackers to execute arbitrary commands on the system...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in OpenSSL (CVE-2022-2068)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in OpenSSL, due to improper validation of user supplied input by the crehash script CVE-2022-2068. The Open SSL component is included as part of the Base OS image that is used by...

VulnCheck KEV: CVE-2023-26802

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17066)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17069)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17070)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Dell PowerScale OneFS Command Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17067)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Arbitrary Command Execution

openmage/magento-lts is vulnerable to Arbitrary Command Execution. The vulnerability is due to the validateAgainstBlockMethodBlacklist function in Security.php which doesn't prevent custom layout enabled admin users from executing malicious commands via block methods...

UI Desktop Access Control Command Execution

The vulnerability of the UI Desktop software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2022-42484

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...