Red Hat PolicyKit pkexec Command Execution Vulnerability

Red Hat PolicyKit is a tool from Red Hat for privilege control of applications on Unix-compatible systems. A security vulnerability exists in the pkexec command in Red Hat PolicyKit 0.113 and earlier versions. An attacker could exploit the vulnerability to execute arbitrary commands with user...

Advantech/B+B SmartWorx VESP211-EU and VESP211-232 Arbitrary Command Execution Vulnerability

The Advantech/B+B SmartWorx VESP211-EU and VESP211-232 are both Advantech China interfaces for connecting serial devices to Ethernet. An arbitrary command execution vulnerability exists in the Advantech/B+B SmartWorx VESP211-EU and VESP211-232, which could allow a remote attacker to perform...

Command Injection in Command Line Interface

Palo Alto Networks firewalls implement a command line interface for interactive configuration through a serial interface or a remote SSH session. An issue was identified that can cause incorrect parsing of a specific SSH command parameter, leading to arbitrary command execution on the OS level...

Multiple Dell Products Arbitrary Command Execution Vulnerability

Dell SonicWALL GMSGMS is a global management system for rapid deployment and centralized management of SonicWALL infrastructures.Analyzer is a set of network analyzer software for SonicWALL infrastructures.UMA EM5000 is a set of universal management appliance software.GMS ViewPoint GMSVP web...

IBM QRadar SIEM Web UI Arbitrary Command Execution Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A security...

The vulnerability of the remote monitoring and management system of Impero Education Pro allows a perpetrator to execute arbitrary commands.

The vulnerability of the remote monitoring and management system of Impero Education Pro is related to the authentication string -1|AUTHENTICATE\x02PASSWORD. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using encrypted commands...

HOME SPOT CUBE vulnerable to OS command injection

Overview HOME SPOT CUBE provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE contains an OS command injection vulnerability. Masaki Yoshikawa of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

blueman: privilege escalation

A local privilege escalation vulnerability has been found in the Network::EnableNetwork method of blueman. An unsanitized string is received over DBUS into the dhcphandler parameter and passed to eval, thus allowing arbitrary command execution with the privileges of the user running blueman...

Vulnerabilities of the Debian GNU/Linux operating system, allowing attackers to inject arbitrary SMTP commands

The Debian GNU/Linux operating system has multiple vulnerabilities due to the failure to address the issue of handling CRLF sequences carriage return followed by line feed. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary SMTP commands through CRLF sequences into the...

Seeds acmailer Arbitrary Command Execution Vulnerability

Seeds acmailer is a suite of mobile email applications from Seeds Japan. A security vulnerability exists in Seeds acmaile that allows remote attackers to submit a special request to execute arbitrary OS commands...

The vulnerability of the Foomatic printing filter and the Ubuntu operating system allows a hacker to execute arbitrary commands.

The vulnerability of the foomatic-rip component util.c in the cups-filters package in Foomatic printing and the Ubuntu operating system is related to the use of an incomplete blacklist. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the quotation mark...

Trend Micro Password Manager program arbitrary command execution vulnerability verification-vulnerability and early warning-the black bar safety net

Trend Micro antivirus software to suit the windows version, contains a password management program, the program is also in the official website provides a single download connection, is a free service. The default installation of the latest TRAND Micro: the ! 1 Figure 1 Can in Data Security find...

Manage Engine Application Manager 12.5 - Arbitrary Command Execution

Manage Engine Application Manager 12.5 - Arbitrary Command Execution !C:/Python27/python.exe -u Applications Manager 12.5 Arbitrary Command Execution Exploit Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.5 Summary: ManageEngine Applications...

Pitivi任意命令执行漏洞

No description provided by source...

ManageEngine Application Manager 12.5 Command Execution

!C:/Python27/python.exe -u Applications Manager 12.5 Arbitrary Command Execution Exploit Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.5 Summary: ManageEngine Applications Manager is an application performance monitoring solution that...

Manage Engine Application Manager 12.5 - Arbitrary Command Execution

!C:/Python27/python.exe -u Applications Manager 12.5 Arbitrary Command Execution Exploit Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.5 Summary: ManageEngine Applications Manager is an application performance monitoring solution that...

Applications Manager 12.5 Arbitrary Command Execution Exploit

Summary ManageEngine Applications Manager is an application performance monitoring solution that proactively monitors business applications and help businesses ensure their revenue-critical applications meet end user expectations. Applications Manager offers out-of-the-box monitoring support for...

Trend Micro - node.js HTTP Server Listening on localhost Can Execute Commands

Trend Micro - node.js HTTP Server Listening on localhost Can Execute Commands Trend Micro Maximum Security 10 Exploit Sample exploit for Trend Micro Maximum Security 10. -- Tavis Ormandy. Command: Click Here to run the command above the default will uninstall Trend Micro Maximum. img...

Furuno Voyage Data Recorder (VDR) moduleserv firmware update utility fails to properly sanitize user-provided input

Overview Furuno Voyage Data Recorder VDR VR-3000/VR-3000S and VR-7000 moduleserv firmware update utility fails to properly sanitize user-provided input and is vulnerable to arbitrary command execution with root privileges. Description According to the Furuno VDR product page, the VDR "records all...

CVE-2015-5003

The portal in IBM Tivoli Monitoring ITM 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to execute arbitrary commands by leveraging Take Action view authority and providing crafted input...