CVE-2022-45482

Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2022-45562

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...

CVE-2022-45045

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

CVE-2022-30528

CVE-2022-30528 : A SQL injection exists in the asith-eranga ISIC tour booking application. The vulnerability affects the username parameter in /system/user/modules/mod_users/controller.php, allowing an attacker to execute arbitrary commands. It is documented with a high impact (C, I, A = HIGH) an...

CVE-2022-45045

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

CVE-2022-45045

The CVE-2022-45045 issue affects Xiongmai NVR models such as MBD6304T (V4.02.R11.00000117.10001.131900.00000) and NBD6808T-PL (V4.02.R11.C7431119.12001.130000.00000). It allows an authenticated attacker to execute arbitrary OS commands as root by supplying a crafted JSON during an upgrade request...

PT-2022-27390 · Xiongmai · Xiongmai Nvr

Name of the Vulnerable Software and Affected Versions: Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000 Description: The issue allows authenticated users to execute arbitrary commands as root. A remote and...

CVE-2022-44533

A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-44533

The CVE-2022-44533 issue affects Aruba EdgeConnect Enterprise Software: ECOS 9.2.1.0 and below; 9.1.3.0 and below; 9.0.7.0 and below; 8.3.7.1 and below. The vulnerability is in the web management interface and allows remote authenticated users to run arbitrary commands on the underlying host, pot...

CVE-2022-44533

A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-43542

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-43542

Aruba EdgeConnect Enterprise Software (ECOS) is affected by CVE-2022-43542 via its command line interface. The vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to full system compromise. Affected version...

CVE-2022-43541

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-43541

CVE-2022-43541 affects Aruba EdgeConnect Enterprise Software via the built-in command line interface. The vulnerability allows remote authenticated users to execute arbitrary commands as root on the underlying OS, potentially leading to complete system compromise. Affected software and versions a...

CVE-2022-43541

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37924

Aruba EdgeConnect Enterprise Software contains a command-line interface vulnerability (CVE-2022-37924) that allows remote authenticated users to execute arbitrary commands as root on the underlying OS, potentially leading to full system compromise. Affected versions include ECOS 9.2.1.0 and below...

CVE-2022-37923

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37923

The CVE-2022-37923 issue affects Aruba EdgeConnect Enterprise Software, specifically the EdgeConnect Enterprise command line interface. The vulnerability enables remote authenticated users to execute arbitrary commands with root privileges on the underlying OS, potentially resulting in complete s...

CVE-2022-37922

CVE-2022-37922 affects Aruba EdgeConnect Enterprise Software via the EdgeConnect CLI. The vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to complete system compromise. Affected versions include ECOS 9....