Command injection

A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution...

CVE-2021-42129

CVE-2021-42129 affects Ivanti Avalanche prior to 6.3.3. Multiple connected sources describe a command injection/remote code execution vulnerability in Ivanti Avalanche components, with different root causes cited: NVD/NVD entry notes a command execution via Inforail Service; Red Hat advisory refe...

CVE-2021-42129: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution...

CVE-2021-42132: Improper Neutralization of Special Elements used in a Command

A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution...

Avalanche runAgentRestarter Arbitrary Command Execution

The vulnerability of the runAgentRestarter method in the mobile device management system Avalanche is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted data...

elecom lan routers operating system command injection vulnerability (CNVD-2021-95483)

elecom lan routers is a router from Elecom Japan. An operating system command injection vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

CVE-2021-23259

Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotelyRCE...

CVE-2021-20864

Improper access control vulnerability in ELECOM routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

CVE-2021-20859

ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior,...

Design/Logic Flaw

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

elecom lan routers operating system command injection vulnerability

elecom lan routers is a router from Elecom Japan. An operating system command injection vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

The Perl fingerd program allows arbitrary command execution from remote users.

...

elecom lan routers buffer overflow vulnerability

elecom lan routers is a router from Elecom Japan. A buffer overflow vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

EyesOfNetwork /etc/sudoers Privilege Escalation Command Execution

The vulnerability of the /etc/sudoers component of the EyesOfNetwork EON monitoring software for systems and networks is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary commands using NSE scripts...

CVE-2021-26612: Improper Input Validation

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code...

PT-2021-6213

Name of the Vulnerable Software and Affected Versions NETGEAR AC2100 versions prior to 1.2.0.88 NETGEAR AC2400 versions prior to 1.2.0.88 NETGEAR AC2600 versions prior to 1.2.0.88 NETGEAR D7000 versions prior to 1.0.1.82 NETGEAR R6220 versions prior to 1.1.0.110 NETGEAR R6230 versions prior to...

PT-2021-17079

Name of the Vulnerable Software and Affected Versions Nexacro platform affected versions not specified Description An issue with improper input validation in the copy method of the Nexacro platform allows for arbitrary file creation. This can be exploited by remote attackers to execute arbitrary...

CVE-2021-41243: Improper Neutralization of Special Elements used in an OS Command

There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users with permissions to upload files may upload crafted zip files which may execute arbitrary commands on the host operating system. This is a vulnerability that needs to be...

PT-2021-5431

Name of the Vulnerable Software and Affected Versions QNAP QVR versions prior to 5.1.6 build 20211109 Description A command injection issue affects QNAP QVR, related to the failure to neutralize special elements used in an OS command. This allows a remote attacker to execute arbitrary commands. T...

Cisco Firepower Threat Defense CLI Command Execution

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems lies in insufficient checking of command arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...