CVE-2024-5670

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the remote server...

CVE-2024-5670

Summary (CVE-2024-5670) : The web services of Softnext’s Mail SQR Expert and Mail Archiving Expert fail to validate user input, enabling unauthenticated remote attackers to inject and execute arbitrary OS commands on the remote server. This is described across multiple sources as an OS command in...

Xenforo 2.2.15 Remote Code Execution Vulnerability

XenForo versions 2.2.15 and below suffer from a remote code execution vulnerability in the Template system. ----------------------------------------------------------------------- XenForo = 2.2.15 Template System Remote Code Execution Vulnerability...

Code Injection

setuptools is vulnerable to Code Injection. The vulnerability is due to the packageindex module's download function, which can execute arbitrary OS commands when exposed to user-controlled inputs such as package URLs...

CVE-2024-28750

A remote attacker with high privileges may use a deleting file function to inject OS commands...

CVE-2024-28749

A remote attacker with high privileges may use a writing file function to inject OS commands...

CVE-2024-28748

A remote attacker with high privileges may use a reading file function to inject OS commands...

CVE-2024-28750

CVE-2024-28750 : Multiple sources confirm a remote OS command injection in ifm electronic Smart PLC AC14xx/AC4xxS through the delete file function. The vulnerability allows a remote attacker with elevated privileges to inject commands, originating from the delete file operation. CNNVD specifies a...

CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections

A remote attacker with high privileges may use a deleting file function to inject OS commands...

CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections

A remote attacker with high privileges may use a deleting file function to inject OS commands...

CVE-2024-28749 ifm: Writing file function in Smart PLC allows command injections

A remote attacker with high privileges may use a writing file function to inject OS commands...

CVE-2024-28749

CVE-2024-28749 affects ifm electronic Smart PLC AC14xx/AC4xxS via the Write to File function, enabling OS command injections by a remote attacker with elevated privileges. The issue is described as an OS command injection originating from a remote attacker with high privileges; CVSSv3.1 base scor...

CVE-2024-28749 ifm: Writing file function in Smart PLC allows command injections

A remote attacker with high privileges may use a writing file function to inject OS commands...

CVE-2024-28748 ifm: Reading function in Smart PLC allows command injections

A remote attacker with high privileges may use a reading file function to inject OS commands...

CVE-2024-28748 ifm: Reading function in Smart PLC allows command injections

A remote attacker with high privileges may use a reading file function to inject OS commands...

CVE-2024-28748

CVE-2024-28748 affects ifm electronic Smart PLC AC14xx and AC4xxS devices. The issue stems from a read file function that allows a remote attacker with high privileges to inject operating-system commands, enabling potential command execution. Public details in connected documents identify affecte...

PT-2024-22556 · Ifm · Smart Plc Ac14Xx Firmware +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A remote attacker with high privileges may use a reading file function to inject OS commands. There is no information provided about the estimated numbe...

CVE-2024-38471

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...

CVE-2024-38471

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...

CVE-2024-38471

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...