5 matches found
CVE-2020-14293
CVE-2020-14293 此漏洞由我发现并披露。本仓库将包含安全公告、受影响软件及漏洞利用代码。 本仓库仅用于教育目的。 链接 公告 SYSS-2020-025 详细分析 SySS 博客文章 Exploit-DB 上的漏洞利用 厂商通知 MITRE 条目 NVD 条目 软件 你可以在发布页面找到该软件。它是一个在 VirtualBox 中对我可用的 vmdk 文件。详细说明见这里：发布页面...
CVE-2020-14293
confdatetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field obtained from the web interface...
CVE-2020-14293
CVE-2020-14293 affects Secudos DOMOS 5.8 (OS Command Injection). The issue arises from insufficient input validation of user-provided data, allowing remote attackers to inject shell commands via the zone field in the web interface, potentially gaining root privileges. Public disclosures and advis...
DOMOS 5.8 Command Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-025 Product: DOMOS Manufacturer: Secudos GmbH Affected Versions: = DOMOS 5.8 Tested Versions: DOMOS 5.8 Vulnerability Type: OS Command Injection CWE-78 Risk Level: Low Solution Status: Solved Manufacturer Notification:...
