12949 matches found
An authenticated user can execute arbitrary command in Gerapy
Impact An authenticated user can execute arbitrary command, see more in https://github.com/Gerapy/Gerapy/issues/211. Patches Fixed in 0.9.9...
PT-2021-7480
Name of the Vulnerable Software and Affected Versions Moxa OnCell G3150A-LTE versions affected versions not specified Moxa OnCell G3470A-LTE versions affected versions not specified Moxa WDR-3124A versions affected versions not specified Moxa AWK-3131A versions affected versions not specified Mox...
Lantronix PremierWave 2050 Buffer Overflow Vulnerability
The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 version 8.9.0.0R4 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to send specially designed HTTP requests for arbitrary command...
Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04974)
The Lantronix PremierWave 2050 is an embedded Wi-Fi module manufactured by Lantronix.The Web Manager FsTFtp feature of the Lantronix PremierWave 2050 8.9.0.0R4 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker with a specially crafted HTTP...
Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04973)
The PremierWave 2050 is an embedded Wi-Fi module manufactured by Lantronix.The Web Manager SslGenerateCSR feature of the Lantronix PremierWave 2050 8.9.0.0R4 is vulnerable to OS command injection, which can be exploited by attackers to cause arbitrary command execution with the help of specially...
Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04975)
The Lantronix PremierWave 2050 is an embedded Wi-Fi module manufactured by Lantronix. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to cause arbitrary command execution in the "EC keypasswd" parameter wit...
PT-2021-5843
Name of the Vulnerable Software and Affected Versions NETGEAR RBR50 versions prior to 2.7.3.22 NETGEAR RBS50 versions prior to 2.7.3.22 NETGEAR RBK50 versions prior to 2.7.3.22 Description The issue is related to the disclosure of sensitive information in certain NETGEAR devices. Exploitation of...
Netgear RBR750 and NETGEAR have command injection vulnerabilities
Netgear RBR750 and NETGEAR are both products of Netgear, Inc.RBR750 is a home WiFi system.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between networks. NETGEAR suffers from a command injection vulnerability that arises from a network system or...
Netgear RBR750 and NETGEAR have command injection vulnerabilities
Netgear RBR750 and NETGEAR are both products of Netgear, Inc.RBR750 is a home WiFi system.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between networks. NETGEAR suffers from a command injection vulnerability that arises from a network system or...
Netgear RBR750 and NETGEAR have command injection vulnerabilities
Netgear RBR750 and NETGEAR are both products of Netgear, Inc.RBR750 is a home WiFi system.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between networks. NETGEAR suffers from a command injection vulnerability that arises from a network system or...
Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04976)
The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. Used to provide reliable and always-on 5G Wi-Fi connectivity, the Lantronix PremierWave 2050 version 8.9.0.0R4 is vulnerable to an operating system command injection vulnerability that can be exploited by...
Apache Traffic Control LDAP Filter Command Execution
The vulnerability of the LDAP filter in the Apache Traffic Control system for building CDN networks exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system by sending a...
CVE-2021-43984
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...
CVE-2021-23198: Improper Neutralization of Special Elements used in an OS Command
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...
CVE-2021-21882
An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-21882
An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-21883
An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-21877
Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability...