Arbitrary Command Execution Vulnerability in a System of China Soft Technology

Ltd. is a product of the implementation of the pilot project of knowledge innovation by the Institute of Software of the Chinese Academy of Sciences, and is the result of the restructuring of the main body of the Institute's technological research and development. An arbitrary command execution...

PT-2016-6165 · Corega · Corega Cg-Wlbargl

Name of the Vulnerable Software and Affected Versions: Corega CG-WLBARGL devices affected versions not specified Description: The issue allows remote authenticated users to execute arbitrary commands via unspecified vectors. Recommendations: At the moment, there is no information about a newer...

IBM MessageSight Arbitrary Command Execution Vulnerability

IBM MessageSight is an IBM messaging appliance designed for machine-to-machine m2m and mobile environments that supports real-time processing of large numbers of events and provides messaging capabilities inside and outside the enterprise. An arbitrary command execution vulnerability exists in IB...

Meteocontrol WEB'log arbitrary command execution vulnerability

No description provided by source...

Apache Continuum 1.4.2 Arbitrary Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Continuum Arbitrary Command Execution', 'Description' = %q This module exploits a command injection in Apache Continuum 'David Shanahan',...

IBM WebSphere MQ Arbitrary Command Execution Vulnerability

IBM WebSphere MQ is a messaging middleware product. An arbitrary command execution vulnerability exists in IBM WebSphere MQ, which can be exploited by a local attacker to execute arbitrary commands with elevated privileges...

Apache Continuum 1.4.2任意命令执行

No description provided by source...

CVE-2015-7611

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors...

Fonality Arbitrary Command Execution Vulnerability

Fonality is an open source telephone switch solution with integrated VoIP and CRM features. A security vulnerability in Fonality's assignment of incorrect permissions to /var/www/rpc/surun scripts allows remote attackers to execute arbitrary commands with root privileges...

HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)

Exploit Title: Data Protector Encrypted Communications Date: 26-05-2016 Exploit Author: Ian Lovering Vendor Homepage: http://www8.hp.com/uk/en/software-solutions/data-protector-backup-recovery-software/ Version: A.09.00 and earlier Tested on: Windows Server 2008 CVE : CVE-2016-2004 This module...

ESF pfSense status_rrd_graph_img.php Command Injection

A Command Injection vulnerability has been reported in ESF pfSense. This vulnerability is due to statusrrdgraphimg.php incorrectly validating the graph HTTP parameter. A remote, authenticated attacker can exploit this vulnerability by sending crafted requests to the statusrrdgraphimg.php URI...

HP Data Protector A.09.00 - Arbitrary Command Execution

!/usr/bin/python Exploit Title: Data Protector Encrypted Communications Date: 26-05-2016 Exploit Author: Ian Lovering Vendor Homepage: http://www8.hp.com/uk/en/software-solutions/data-protector-backup-recovery-software/ Version: A.09.00 and earlier Tested on: Windows Server 2008 CVE : CVE-2016-20...

HP Data Protector A.09.00 - Arbitrary Command Execution

HP Data Protector A.09.00 - Arbitrary Command Execution !/usr/bin/python Exploit Title: Data Protector Encrypted Communications Date: 26-05-2016 Exploit Author: Ian Lovering Vendor Homepage: http://www8.hp.com/uk/en/software-solutions/data-protector-backup-recovery-software/ Version: A.09.00 and...

HP Data Protector A.09.00 - Arbitrary Command Execution

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Data Protector Encrypted Communications Date: 26-05-2016 Exploit Author: Ian Lovering Vendor Homepage: http://www8.hp.com/uk/en/software-solutions/data-protector-backup-recovery-software/ Version: A.09.00 and...

天融信等厂商上网行为管理设备任意命令执行漏洞

两处任意命令执行无需登录： 第一处： ifkeyexists"texttarget", $GET && keyexists"textpingcount", $GET && keyexists"textpacketsize", $GET $texttarget = $GET"texttarget"; $textpingcount = $GET"textpingcount"; $textpacketsize = $GET"textpacketsize"; $pingcmd = sprintf"ping %s -c %s -s %s", $texttarget, $textpingcount,...

CouchDB未授权访问导致的任意系统命令执行漏洞

详情来源：阿里云安全 0x01 漏洞的来龙去脉 CouchDB 是一个开源的面向文档的数据库管理系统，可以通过 RESTful JavaScript Object Notation JSON API 访问。CouchDB会默认会在5984端口开放Restful的API接口，用于数据库的管理功能。 那么，问题出在哪呢？翻阅官方描述会发现，CouchDB中有一个QueryServer的配置项，在官方文档中是这么描述的： CouchDB delegates computation of design documents functions to external query servers...

Meteocontrol WEB'log Arbitrary Command Execution Vulnerability

Meteocontrol WEB'log is a web-based SCADA system that provides energy and power configuration management functions using different connected devices. A security vulnerability exists in the access command shell-like functionality of several Meteocontrol WEB'log products, which could be exploited b...

Adobe ColdFusion Arbitrary Command Execution Vulnerability

Adobe ColdFusion is the United States of America Audobee Adobe a dynamic Web server products, which runs the CFML ColdFusion Markup Language is a programming language for Web applications. A command execution vulnerability exists in Adobe ColdFusion. A remote attacker can exploit this vulnerabili...

phpcms后台低权限任意命令执行

No description provided by source...

BMC Server Automation RSCD Agent Weak ACL XML-RPC Arbitrary Command Execution

The RSCD agent running on the remote host does not have access controls in place to prevent an attacker from executing XML-RPC commands. An unauthenticated, remote attacker can exploit this to execute arbitrary commands in the context of the user in which the connections are mapped. C Tenable...