18160 matches found
SpotCam Sense 操作系统命令注入漏洞
SpotCam Sense is a camera from China's SightBoob.com SpotCam company. SpotCam FHD 2 1.0036 firmware version exists operating system command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability ...
SpotCam Sense 命令注入漏洞
SpotCam Sense is a webcam from China's SpotCam company. SpotCam Sense v2.2044 firmware version exists command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability to arbitrary system commands t...
The vulnerability of the web-based administration interface for microprogrammed software-based industrial routers NB800, NG800, NB1601, NB1800, NB1810, NB2800, NB2810, NB3701, and NB3800 allows a hacker to execute arbitrary commands with elevated privileges.
The vulnerability of the web-based administration interface for microprogrammed software-based industrial routers such as NB800, NG800, NB1601, NB1800, NB1810, NB2800, NB2810, NB3701, and NB3800 exists due to the lack of measures taken to neutralize the special elements used in the operating syst...
Debian: Security Advisory (DSA-5332-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
QQ Music Command Execution Vulnerability
QQ Music is the official music playback software from Tencent. A command execution vulnerability exists in QQ Music, which can be exploited by an attacker to execute arbitrary commands...
CVE-2022-43907 IBM Security Guardium command execution
IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901...
SUSE CVE-2020-21583
An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...
CVE-2023-25649
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...
Command injection
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...
CVE-2023-25649 OS Command Injection Vulnerability in a Mobile Internet Product of ZTE
There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...
PT-2023-24005 · Unknown · E-Excellence U-Office Force
Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The file uploading function in e-Excellence U-Office Force does not restrict the upload of files with dangerous types. An unauthenticated remote attacker can exploit thi...
Design/Logic Flaw
CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue...
CVE-2023-37469 CasaOS Command Injection vulnerability
CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue...
Exploit for Incorrect Authorization in Ivanti Mobileiron_Sentry
CVE-2023-38035 POC for CVE-2023-38035 affecting Ivanti Sentry...
CVE-2023-37427
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands as root on...
CVE-2023-37427
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands as root on...
CVE-2023-37428
A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading t...
CVE-2023-37424
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...
CVE-2023-24517
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue unrestricted file upload to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms...