CVE-2024-27785

CVE-2024-27785 affects Fortinet FortiAIOps 2.0.0. The flaw is improper neutralization of formula elements in CSV files, allowing a remote authenticated attacker to execute arbitrary commands on a client’s workstation via poisoned CSV reports. Exploitation requires authentication; an attacker can ...

CVE-2024-4944

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged...

CVE-2024-4944

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged...

CVE-2024-4944 Mobile VPN with SSL Local Privilege Escalation Vulnerability

A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged...

CVE-2024-4944

WatchGuard Mobile VPN with SSL client for Windows is affected by a local privilege escalation vulnerability associated with CVE-2024-4944. The issue allows a local user to execute arbitrary commands with elevated privileges due to an underlying vulnerability path that is identified as an addition...

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2024-20399)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific configurati...

CVE-2024-37870

CVE-2024-37870 describes a SQL injection in the Learning Management System Project In PHP With Source Code version 1.0, specifically in processscore.php. The root cause is unsanitized input passed via the id parameter, enabling an attacker to construct arbitrary SQL commands. Documented impacts i...

Danfoss AK-SM800A Improper Input Validation (CVE-2023-25915)

Due to improper input validation, a remote attacker could execute arbitrary commands on the target system. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

KB5040434: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2024)

The remote Windows host is missing security update 5040434. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...

Apache CloudStack Code Injection Vulnerability

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack suffers from a code injection vulnerability that...

Billing System security breach

Billing System is a billing system by angel jude suarez personal developer. A security vulnerability exists in Billing System version 1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the username parameter...

PT-2024-33535

Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL client affected versions not specified Description A local privilege escalation issue in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated...

CVE-2024-38346

CVE-2024-38346 affects Apache CloudStack’s cluster service that runs on an unauthenticated port (default 9090). The provided documents describe a code-injection vulnerability enabling remote code execution on targeted hypervisors and CloudStack management server hosts, potentially leading to comp...

CVE-2024-38346 Apache CloudStack: Unauthenticated cluster service port leads to remote execution

The CloudStack cluster service runs on unauthenticated port default 9090 that can be misused to run arbitrary commands on targeted hypervisors and CloudStack management server hosts. Some of these commands were found to have command injection vulnerabilities that can result in arbitrary code...

Command Injection

gogs.io/gogs is vulnerable to Command Injection. The vulnerability is caused due to inadequate input validation during the previewing of changes, allowing an attacker to inject arbitrary commands...

Command Injection

deeplake is vulnerable to Command Injection. The vulnerability is due to a lack of input sanitization within the ingestkaggle API when ingesting a remote Kaggle dataset, allowing an attacker to execute arbitrary commands on the server...

Ispmanager Security Vulnerability

Ispmanager is a Linux-based control panel from Ispmanager, Inc. It is used to manage dedicated, gaming and VPS web servers, as well as sell shared hosting. A security vulnerability exists in Ispmanager version 6.98.0, which stems from an information disclosure issue that allows an attacker to...

Cisco NX-OS Software Command Injection Vulnerability (CNVD-2024-31391)

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A command injection vulnerability exists in Cisco NX-OS Software, which arises from insufficient validation of parameters passed to specific configuration CLI commands, and...

PT-2024-39061

Name of the Vulnerable Software and Affected Versions: VICIdial affected versions not specified Description: The issue allows an attacker with authenticated access as an "agent" to execute arbitrary shell commands as the "root" user. This can potentially be chained with other exploits to achieve...

Apache CloudStack 代码注入漏洞

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack suffers from a code injection vulnerability that...