CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-31311: Improper Neutralization of Special Elements used in an OS Command

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

PT-2022-20683 · Wavlink · Wavlink Aerial X 1200M

Name of the Vulnerable Software and Affected Versions: WAVLINK AERIAL X 1200M version M79X3.V5030.180719 Description: The issue allows attackers to execute arbitrary commands via a crafted POST request to the adm.cgi endpoint. This is achieved by sending a specifically designed request to the...

PT-2022-3766

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description The issue is related to command injection vulnerabilities in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can se...

PT-2022-3909 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 version 3.3.0 Description: The issue is related to command injection vulnerabilities in the web server's ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker ca...

PT-2022-3796

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description Multiple command injection vulnerabilities exist in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a...

WAVLINK AERIAL X 1200M: Operating System Command Injection Vulnerability

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to a command injection vulnerability in version M79X3.V5030.180719, which stems from the execution of a POST received in adm.cgi spliced directly into a system function, which can be exploited by an attacker to exploit this...

PT-2022-3908

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description Multiple command injection vulnerabilities exist in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a...

LibreNMS Command Injection Vulnerability (CNVD-2022-91160)

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. LibreNMS v22.3.0 contains a command injection vulnerability that stems from the failure of the serviceip, hostname and serviceparam parameters to properly filter the construct command special...

Arbitrary Command Execution

jmespath is vulnerable to arbitrary command execution. An attacker is able to inject and execute arbitrary commands due to the unsafe usage of JSON.load where JSON.parse is preferable...

Fortinet FortiAP-S/W2 Command Injection

The vulnerability of Fortinet FortiAP-S/W2 and FortiAP lies in the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

PT-2022-8314

Name of the Vulnerable Software and Affected Versions 3CX Phone System versions 16.0.0.1570 Description The issue allows an authenticated attacker to execute arbitrary commands with the phonesystem user privileges due to the mishandling of a specific input sequence, namely " followed by "...

EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2022-1804)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pip...

CVE-2022-29735

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request...

Cisco IOS XE Privilege Escalation Command Injection

The vulnerability of the CLI component of the Cisco IOS XE operating system for Cisco Catalyst 9000 Series network devices is related to privilege assignment errors. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary commands...

TOTOLINK EX1200T: Operating System Command Injection Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T V4.1.2cu.5215, which originates from the file lib/cstemodules/system in the setNoticeCfg function in the file lib/cstemodules/system fails to properly...

gitsome operating system command injection vulnerability

npm bbultman gitsome is a small library from npm, USA. It can help make decisions based on the data available in a git repository. A security vulnerability exists in gitsome version 0.2.3, which stems from the fact that an attacker controlling the tagged name of the target git repository may...

CVE-2021-34082

OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function...

PT-2022-10314

Name of the Vulnerable Software and Affected Versions es128 ssl-utils version 1.0.0 Description The issue allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest and the createCert functions. Recommendations For es128 ssl-utils version...

PT-2022-10312

Name of the Vulnerable Software and Affected Versions Mintzo Docker-Tester versions prior to 1.2.2 Description The issue allows attackers to execute arbitrary commands via shell metacharacters in the ports entry of a crafted docker-compose.yml file. Recommendations For versions prior to 1.2.2,...