994 matches found
CVE-2021-27691
Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...
CVE-2022-23118
Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line git at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller...
CVE-2020-7240
Meinberg Lantime M300 and M1000 devices allow attackers with privileges to configure a device to execute arbitrary OS commands by editing the /config/netconf.cmd script aka Extended Network Configuration. Note: According to the description, the vulnerability requires a fully authenticated...
CVE-2025-69426: Incorrect Permission Assignment for Critical Resource
The Ruckus vRIoT IoT Controller firmware versions prior to 3.0.0.0 GA contain hardcoded credentials for an operating system user account within an initialization script. The SSH service is network-accessible without IP-based restrictions. Although the configuration disables SCP and pseudo-TTY...
CVE-2025-15389: Improper Neutralization of Special Elements used in an OS Command
VPN Firewall developed by QNO Technology has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...
CVE-2025-3232: Missing Authentication for Critical Function
A remote unauthenticated attacker may be able to bypass authentication by utilizing a specific API route to execute arbitrary OS commands...
CVE-2025-65074: Improper Limitation of a Pathname to a Restricted Directory
WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to execute arbitrary OS commands on the server using path traversal in the showerr script. This issue was fixed in version...
CVE-2025-42892: Improper Neutralization of Special Elements used in an OS Command
Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker with administrative access and adjacent network access could upload specially crafted content to the server. If processed by the application, this content enables execution of arbitrary operating...
EUVD-2015-0538
Malware in sbrugna...
EUVD-2021-2512
Malware in sbrugna...
EUVD-2018-1504
Malware in sbrugna...
EUVD-2016-7296
Malware in sbrugna...
EUVD-2018-1444
Malware in sbrugna...
EUVD-2015-6493
Malware in sbrugna...
EUVD-2020-26718
Malware in sbrugna...
EUVD-2018-8462
Malware in sbrugna...
EUVD-2015-3062
Malware in sbrugna...
EUVD-2020-26697
Malware in sbrugna...