PT-2018-2653

Name of the Vulnerable Software and Affected Versions University of Washington IMAP Toolkit version 2007f PHP affected versions not specified uw-imap affected versions not specified Description The issue is related to insufficient neutralization of special elements in the IMAP interpreter...

CVE-2018-15709: Improper Neutralization of Special Elements used in an OS Command

Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request...

CVE-2018-19073

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName,...

PT-2018-14783

Name of the Vulnerable Software and Affected Versions Foscam C2 versions 1.11.1.8 Opticam i5 versions 1.5.2.11 Description An issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the usrName parameter of a "CGIProxy.fcgi addAccount action". Recommendations Fo...

CVE-2018-14558

CVE-2018-14558 affects Tenda AC7/AC9/AC10 routers (firmware: AC7 ≤ V15.03.06.44_CN, AC9 ≤ V15.03.05.19(6318)_CN, AC10 ≤ V15.03.06.23_CN). The flaw arises in the formsetUsbUnload function, which calls dosystemCmd with untrusted input via a crafted goform/setUsbUnload request, leading to arbitrary ...

CVE-2018-0643

Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-server 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0661

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to bypass access restriction to add files on a specific directory that may result ...

CVE-2018-0663: Use of Hard-coded Credentials

Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via...

PT-2018-8999

Name of the Vulnerable Software and Affected Versions I-O DATA network camera products TS-WRLP versions 1.09.04 and earlier I-O DATA network camera products TS-WRLA versions 1.09.04 and earlier I-O DATA network camera products TS-WRLP/E versions 1.09.04 and earlier Description The issue allows an...

Idera Up.time Monitoring Station Arbitrary File Upload Vulnerability

Idera Up.time Monitoring Station is a cross-platform server monitoring software from Idera. The software provides the server performance, availability and other indicators to collect, summarize and generate reports and other functions. An arbitrary file upload vulnerability exists in the...

Design/Logic Flaw

An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 build 16 and 7.4.0 build 13. It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands...

CVE-2015-9263

The CVE-2015-9263 entry concerns Idera Up.Time Monitoring Station (versions up to 7.5.0 build 16 and 7.4.0 build 13) where the post2file.php upload mechanism allows uploading arbitrary files (e.g., PHP) to the webroot. The underlying issue is an unauthenticated arbitrary file upload that can lead...

PT-2018-13271

Name of the Vulnerable Software and Affected Versions ASUS DSL-N12E C1 version 1.1.2.3 345 Description The issue allows a remote attacker to execute arbitrary OS commands via service parameters. This can be achieved by using shell metacharacters in the destIP parameter of a cmdMethod=ping request...

CVE-2015-9263: Unrestricted Upload of File with Dangerous Type

An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 build 16 and 7.4.0 build 13. It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands...

CVE-2018-1245: Incorrect Authorization

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component ACM. A remote authenticated malicious user with non-admin privileges could potentially bypass the Java Security Policies. Once bypassed, a...

Node.js third-party modules: Insecure implementation of deserialization in cryo

I would like to report code injection in serialization package cryo It allows execute arbitrary code using custom prototype. Module module name: cryo version: 0.0.6 npm page: https://www.npmjs.com/package/cryo Module Description JSON on steroids. Built for node.js and browsers. Cryo is inspired b...

CVE-2018-0556

CVE-2018-0556 affects Buffalo WZR-1750DHP2 firmware versions 2.30 and earlier. The vulnerability is an OS Command Injection (CWE-78) in the device’s firmware that allows an attacker with network access to execute arbitrary commands on the router. Root cause involves inadequate input handling enab...

PT-2018-8914

Name of the Vulnerable Software and Affected Versions Buffalo WZR-1750DHP2 versions 2.30 and earlier Description The issue allows an attacker to execute arbitrary OS commands. Recommendations For Buffalo WZR-1750DHP2 versions 2.30 and earlier, at the moment, there is no information about a newer...

ClipBucket beats_uploader Unauthenticated Arbitrary File Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ClipBucket beatsuploader Unauthenticated Arbitrary File Upload", 'Description' = %q This module exploits a vulnerability found in ClipBucket...

CVE-2018-0523

CVE-2018-0523 affects Buffalo WXR-1900DHP2 firmware 2.48 and earlier. The OS Command Injection vulnerability (CWE-78) can allow an attacker on a device-connected network to execute arbitrary OS commands via unspecified vectors. Public sources (JVN/NVD) list this CVE with associated CVSS metrics (...