Node.js Embedded JavaScript 3.1.6 - Template Injection

Node.js Embedded JavaScript 3.1.6 is susceptible to server-side template injection via settingsview optionsoutputFunctionName, which is parsed as an internal option and overwrites the outputFunctionName option with an arbitrary OS command, which is then executed upon template compilation. id:...

Nagios 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php. This in turn can lead to remot...

YouPHPTube Encoder 2.3 - Remote Command Injection

YouPHPTube Encoder 2.3 is susceptible to a command injection vulnerability which could allow an attacker to compromise the server. These exploitable unauthenticated command injections exist via the parameter base64Url in /objects/getImage.php. id: CVE-2019-5127 info: name: YouPHPTube Encoder 2.3 ...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

Hongdian H8922 3.0.5 - Remote Command Injection

Hongdian H8922 3.0.5 devices are susceptible to remote command injection via shell metacharacters into the ip-address a/k/a Destination field to the tools.cgi ping command, which is accessible with the username guest and password guest. An attacker can execute malware, obtain sensitive informatio...

MajorDoMo thumb.php - OS Command Injection

MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager. id: CVE-2023-50917 info: name: MajorDoMo thumb.php - OS Command Injection author: DhiyaneshDK severity: critical...

Seagate BlackArmor NAS - Command Injection

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php. id: CVE-2014-3206 info: name: Seagate BlackArmor NAS - Command Injection author: gy741...

EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands.The injected comman...

rConfig <= 3.9.4 - Authenticated OS Command Injection

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.9.4 does not properly sanitize the fileName POST parameter before using it in a shell command, allowing an authenticated attacker to inject arbitrary OS commands. This template uses default admin credentials to log in before triggering the...

Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection

Visual Tools DVR VX16 4.2.28.0 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-42071 info: name: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection author: gy741 severity: critical description: Visual...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

CyberPanel - Command Injection

CyberPanel aka Cyber Panel before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner sink. There is /filemanager/upload aka File Manager upload unauthenticated remote code execution via shell metacharacters. id: CVE-2024-51568 info: name: CyberPanel - Comman...

Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account

The command injection vulnerability in the CGI program "remotehelp-cgi" in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST...

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

Hikvision IP camera/NVR - Remote Command Execution

Certain Hikvision products contain a command injection vulnerability in the web server due to the insufficient input validation. An attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. id: CVE-2021-36260 info: name: Hikvisio...

Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php. This in turn can lead ...

CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB formSystemCheck ハンドラにおける未認証のリモート root コマンド実行 CWE-78 — OS コマンドインジェクション で、ハードコードされた認証バックドア経由で到達可能。DAP-1360 RevB、ファームウェア 2.14B05 で検証済み。 根本原因 連鎖する 2 つの独立した問題: 1. ハードコードされた認証バイパスパス。 main httpd @ 0x4064c8 内: strcasecmprequestpath, "dEfWzDLOgIn" ; token @ 0x48046c...

CVE-2010-2075

CVE-2010-2075 — UnrealIRCd 3.2.8.1 バックドアエクスプロイト 概要 UnrealIRCd はオープンソースの IRC Internet Relay Chat サーバーであり、初期のチャットプラットフォームと同様に、ネットワーク上でユーザーがリアルタイムに通信できるプロトコルです。 2009年から2010年にかけて、公式ダウンロードミラー経由で配布されていた UnrealIRCd 3.2.8.1 が侵害されていたことが発見されました。攻撃者は正規のソースコードを、隠されたコマンド実行トリガーを含むバックドア版に置き換えていました。 これは サプライチェーン...

cve-2018-1335

앙카라 일디림 베야지트 대학교 컴퓨터공학과 CENG 325 - 정보보안 및 프라이버시 원리 CENG201 OOP 프로젝트 그룹 멤버 @canumay @aslihann @ezgigucuyener @mburakdonmez 참고 자료 NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 - 명령 주입 Rhino Security Labs - CVE-2018-1335 악용: Apache Tika의 명령 주입 Metasploit 면책 조항 익스플로잇 코드는 사이버 보안 연구원David...

vthunting

VT 헌팅 VThunting이 이제 VirusTotal에 등재되었습니다. Virus Total Hunting은 VT api 버전 3을 기반으로 하는 작은 도구로, 매일, 매주 또는 매월 악성코드 헌팅에 대한 보고서를 생성합니다. 보고서는 이메일, Slack 채널 또는 Telegram을 통해 전송할 수 있습니다. 이 도구는 CLI에서도 사용하여 언제든지 보고서를 받을 수 있습니다. 결과의 기본 개수는 10개이지만, 설정 부분에서 증감할 수 있습니다. 이 도구는 Virus Total Intelligence API에서만 작동합니다...