Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)

Drupal Module CODER 2.5 - Remote Command Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Drupal CODER Module Remote Command Execution', 'Description' = %q This module exploi...

D-Link DCS-930L Camera Command Injection Vulnerability

The D-Link DCS-930L is a wireless surveillance camera from Terasic D-Link. A command injection vulnerability exists in the D-Link DCS-930L Camera. An attacker can exploit this vulnerability to execute arbitrary commands in the context of an affected device...

NetApp OnCommand System Manager Local Command Injection Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from the American company NetApp. A local command injection vulnerability exists in NetApp OnCommand System Manager version 8.3.x, which can be exploited by an attacker to inject arbitrary commands into the application...

The vulnerability of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to execute arbitrary commands.

The vulnerability of the Web interface of the Cisco Prime Infrastructure network lifecycle management software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted values for certain...

Glacier smart DNS traffic optimization system nslookup_cgi. cgi arbitrary command execution

No description provided by source...

CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

Arbitrary Command Execution Vulnerability in the Call Center of Shenzhen Jishi Communication Co.

The call center of Shenzhen Jishu Communication Co., Ltd. is a new generation of enterprise-level call center system. An arbitrary command execution vulnerability exists in the call center of Shenzhen JTS Communications Co. By constructing the $POST parameter without any filtering measures, it...

Pivotal Software Spring Framework Arbitrary Command Execution Vulnerability

Pivotal Software Spring Framework is the U.S. Pivotal Software's set of open source Java, Java EE application framework. The framework helps developers build high-quality applications . An arbitrary command execution vulnerability exists in Pivotal Software Spring Framework. An attacker can explo...

Nagios XI Command Injection (CVE-2018-8735; CVE-2018-8736)

A Command Injection vulnerability exists in Nagios XI. Successful exploitation will result in arbitrary command execution with root privileges...

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to execute arbitrary system commands.

The web interface of the router allows for the execution of a limited number of system commands ping, traceroute, dnslookup. However, it is possible to execute any command that is separated by a system separator from the allowed commands...

Vulnerabilities of the Alt Linux SPT operating system, which allow a malicious attacker to disable the device’s functionality

Multiple vulnerabilities in the bash command-line interpreter of the Altron Linux SPT operating system are caused by errors in processing input data during syntax analysis of code. Exploiting these vulnerabilities allows a malicious individual to execute arbitrary commands with the privileges of...

PT-2016-5989 · Bosch Rexroth · Bladecontrol-Webvis

Name of the Vulnerable Software and Affected Versions: Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations: For Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier, at the...

The vulnerability of the Oracle Fusion Middleware software platform allows a malicious individual to execute arbitrary commands, disrupt the logic of the script, and obtain the original script code.

The vulnerability of the Oracle Containers platform’s J2EE component in Oracle Fusion Middleware software relates to an error that occurs due to improper handling of the zero byte during the transmission of a request to another static page or JSP script using functions like pageContext.forward or...

BMC Server Automation RSCD Agent Weak ACL NSH Arbitrary Command Execution

Binary data bmcrscdnshaclcheck.nbin...

XpoLog Center 6 - Remote Command Execution Cross-Site Request Forgery

XpoLog Center 6 - Remote Command Execution Cross-Site Request Forgery XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management...

XpoLog Center 6 - Remote Command Execution / Cross-Site Request Forgery

Exploit for jsp platform in category web applications XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc:...

XpoLog Center 6 - Remote Command Execution / Cross-Site Request Forgery

XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from arbitrary command execution. Attackers...

CVE-2016-1408

Cisco Prime Infrastructure (PI) versions 1.2–3.1 and EPNM versions 1.2–2.0 expose a web-UI vulnerability that allows an authenticated, remote attacker to upload arbitrary files and execute commands via a crafted HTTP request. The root cause is incomplete input validation in the web interface. Imp...

XpoLog Center 6 Cross Site Request Forgery

XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from arbitrary command execution. Attackers...

MileSight camera privilege control page unauthorized access vulnerability

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. An unauthorized access vulnerability exists in the privilege control page of MileSight camera. An unauthorized attacker can use the vulnerability to execute arbitrary commands...