Lucene search
K

55 matches found

CNNVD
CNNVD
added 2021/04/27 12:0 a.m.4 views

Subreddit Home Automation 操作系统命令注入漏洞

Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. A security vulnerability exists in Subreddit Home Automation 3.3.2, which stems from authenticated OS command execution in the custom command v0.1 plugin...

8.5CVSS7.9AI score0.0117EPSS
Exploits2References3
0day.today
0day.today
added 2019/12/30 12:0 a.m.176 views

HomeAutomation 3.3.2 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit: HomeAutomation 3.3.2 - Remote Code Execution Author: LiquidWorm Vendor: Tom Rosenback and Daniel Malmgren Product web page: http://karpero.mine.nu/ha/ Affected version: 3.3.2 Tested on: Apache/2.4.41 centos OpenSSL/1.0.2k-fips Advisor...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2019/12/19 12:0 a.m.102 views

FTP Navigator 8.03 - 'Custom Command' Denial of Service (SEH)

Exploit Title: FTP Navigator 8.03 - 'Custom Command' Denial of Service SEH Date: 2019-12-18 Exploit Author: Chris Inzinga Vendor Homepage: http://www.internet-soft.com/ Software Link: https://www.softpedia.com/dyn-postdownload.php/5edd515b8045f156a9dd48599c2539e5/5dfa4560/d0c/0/1 Version: 8.03...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2019/12/19 12:0 a.m.10 views

FTP Navigator 8.03 - Custom Command Denial of Service (SEH)

FTP Navigator 8.03 - Custom Command Denial of Service SEH Exploit Title: FTP Navigator 8.03 - 'Custom Command' Denial of Service SEH Date: 2019-12-18 Exploit Author: Chris Inzinga Vendor Homepage: http://www.internet-soft.com/ Software Link:...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2019/10/30 12:0 a.m.30 views

Samba AD DC Check Password Script Weakness (CVE-2019-14833)

When the password contains multi-byte non-ASCII characters, the check password script of Samba AD DC does not receive the full password string. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

5.4CVSS5.7AI score0.01267EPSS
Exploits0References1
CNVD
CNVD
added 2019/07/09 12:0 a.m.1 views

Invoxia NVX220 Trust Management Issues Vulnerability

The Invoxia NVX220 is an IP telephone from the French company Invoxia. A trust management issue vulnerability exists in Invoxia NVX220. An attacker could exploit the vulnerability to access a customized CLI...

10CVSS6.8AI score0.01044EPSS
Exploits1References1
Kitploit
Kitploit
added 2019/04/25 1:12 p.m.615 views

Ttyd - Share Your Terminal Over The Web

ttyd is a simple command-line tool for sharing terminal over the web, inspired by GoTTY. Features Built on top of Libwebsockets with C for speed Fully-featured terminal based on Xterm.js with CJK and IME support Graphical ZMODEM integration with lrzsz support SSL support based on OpenSSL Run any...

7.2AI score
Exploits0References11
NVD
NVD
added 2017/12/30 5:29 p.m.13 views

CVE-2017-17089

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...

4.8CVSS4.8AI score0.00166EPSS
Exploits0References2
CVE
CVE
added 2017/12/30 5:0 p.m.54 views

CVE-2017-17089

CVE-2017-17089 concerns Webmin

4.8CVSS4.7AI score0.00166EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/12/30 5:0 p.m.14 views

CVE-2017-17089

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...

4.8AI score0.00166EPSS
Exploits0References2
Metasploit
Metasploit
added 2015/01/27 10:47 a.m.46 views

Windows Run Command As User

This module will login with the specified username/password and execute the supplied command as a hidden process. Output is not returned by default. Unless targeting a local user either set the DOMAIN, or specify a UPN user format e.g. user@domain. This uses the CreateProcessWithLogonW WinAPI...

7.4AI score
Exploits0
NVD
NVD
added 2006/04/11 10:2 a.m.14 views

CVE-2006-1693

Unspecified vulnerability in GlobalSCAPE Secure FTP Server before 3.1.4 Build 01.10.2006 allows attackers to cause a denial of service application crash via a "custom command" with a long argument...

5CVSS6.3AI score0.00507EPSS
Exploits0References5
Cvelist
Cvelist
added 2006/04/11 10:0 a.m.18 views

CVE-2006-1693

Unspecified vulnerability in GlobalSCAPE Secure FTP Server before 3.1.4 Build 01.10.2006 allows attackers to cause a denial of service application crash via a "custom command" with a long argument...

6.3AI score0.00507EPSS
Exploits0References5
Kaspersky
Kaspersky
added 2006/04/11 12:0 a.m.29 views

KLA10144 DoS vulnerability in Secure FTP

An unspecified vulnerability was found in the Secure FTP Server. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network via a specially designed custom command Original advisories - Related products...

5CVSS6.5AI score0.00507EPSS
Exploits0References2
securityvulns
securityvulns
added 2006/04/06 12:0 a.m.40 views

[SA19547] GlobalSCAPE Secure FTP Server Custom Command Denial of Service

TITLE: GlobalSCAPE Secure FTP Server Custom Command Denial of Service SECUNIA ADVISORY ID: SA19547 VERIFY ADVISORY: http://secunia.com/advisories/19547/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: GlobalSCAPE Secure FTP Server 2.x http://secunia.com/product/3219/ GlobalSCAPE...

0.6AI score
Exploits0
Rows per page
Query Builder