18165 matches found
Command injection
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...
Design/Logic Flaw
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...
Aruba Networks EdgeConnect 安全漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that stems from its web interface that allows an authenticated remote user to run arbitrary commands on the underlying host...
Aruba Networks EdgeConnect 安全漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that originates from allowing an authenticated remote user to run arbitrary commands on the underlying host, which could be exploited by a...
Aruba Networks EdgeConnect 安全漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that stems from a command line interface that allows an authenticated remote user to run arbitrary commands on the underlying host...
Tenda W6-S Command Injection Vulnerability
Tenda W6-S is a router from Tenda, a Chinese company. Tenda W6-S is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...
The vulnerability of the FortiWAN traffic balancing system’s web interface allows a attacker to execute arbitrary commands.
The vulnerability of the FortiWAN traffic balancing system’s web interface is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending speciall...
Buffalo network devices 安全漏洞
Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices that could allow an authenticated attacker to execute arbitrary system commands...
Buffalo network devices 操作系统命令注入漏洞
Buffalo network devices are a family of network devices from the Japanese company Buffalo. Buffalo network devices suffer from an operating system command injection vulnerability that can be exploited by an unauthenticated attacker to execute arbitrary system commands via a crafted malicious...
Buffalo network devices 操作系统命令注入漏洞
Buffalo network devices are a family of network devices from the Japanese company Buffalo. Buffalo network devices are vulnerable to an operating system command injection vulnerability that can be exploited by an authenticated attacker to execute arbitrary system commands or access the management...
OS Command Injection
nadesiko3 is vulnerable to OS command injection. The vulnerability exists due to compression and decompression which allows an attacker to inject and execute arbitrary commands...
OS Command Injection
nadesiko3 is vulnerable to os command injection. The vulnerability exists in multiple functions in index.mjs because appkey is not properly validated which allows an attacker to inject and execute arbitrary commands into the system via the file parameter...
pgAdmin 4 Remote Code Execution Vulnerability
pgAdmin 4 is a reliable and comprehensive database design and management software for PostgreSQL. A remote code execution vulnerability exists in pgAdmin 4. The vulnerability is required in Windows environments where, due to lax privilege checks by the developer, an attacker can exploit the...
CVE-2022-45026
An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...
Design/Logic Flaw
An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...
PT-2022-26995 · Unknown · Movable Type Premium Advanced +3
Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.5301 and earlier Movable Type Advanced versions 7 r.5301 and earlier Movable Type Premium version 1.53 and earlier Movable Type Premium Advanced version 1.53 and earlier Description: The issue is related to the...
CVE-2022-45026
An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM export process...
CVE-2022-45026
Markdown Preview Enhanced for VSCode and Atom (versions 0.6.5–0.19.6) contains a command-injection flaw during the GFM export process. The root cause is an issue in how the extension handles GFM export, allowing arbitrary commands to be executed by an attacker. A PoC exploit is indicated in the c...
