1633 matches found
CVE-2018-19518: Improper Neutralization of Argument Delimiters in a Command
University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in c-client/imap4r1.c and the tcpaopen function in osdep/unix/tcpunix.c without preventing argument injection, which might allow remote...
PT-2018-2653
Name of the Vulnerable Software and Affected Versions University of Washington IMAP Toolkit version 2007f PHP affected versions not specified uw-imap affected versions not specified Description The issue is related to insufficient neutralization of special elements in the IMAP interpreter...
CVE-2018-15709: Improper Neutralization of Special Elements used in an OS Command
Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request...
CVE-2018-19073
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. They allow attackers to execute arbitrary OS commands via shell metacharacters in the modelName,...
CVE-2018-14558
CVE-2018-14558 affects Tenda AC7/AC9/AC10 routers (firmware: AC7 ≤ V15.03.06.44_CN, AC9 ≤ V15.03.05.19(6318)_CN, AC10 ≤ V15.03.06.23_CN). The flaw arises in the formsetUsbUnload function, which calls dosystemCmd with untrusted input via a crafted goform/setUsbUnload request, leading to arbitrary ...
CVE-2018-0643
Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-server 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...
CVE-2018-0661
Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier allow an attacker on the same network segment to bypass access restriction to add files on a specific directory that may result ...
CVE-2018-0663: Use of Hard-coded Credentials
Multiple I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via...
Idera Up.time Monitoring Station Arbitrary File Upload Vulnerability
Idera Up.time Monitoring Station is a cross-platform server monitoring software from Idera. The software provides the server performance, availability and other indicators to collect, summarize and generate reports and other functions. An arbitrary file upload vulnerability exists in the...
Design/Logic Flaw
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 build 16 and 7.4.0 build 13. It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands...
CVE-2015-9263
The CVE-2015-9263 entry concerns Idera Up.Time Monitoring Station (versions up to 7.5.0 build 16 and 7.4.0 build 13) where the post2file.php upload mechanism allows uploading arbitrary files (e.g., PHP) to the webroot. The underlying issue is an unauthenticated arbitrary file upload that can lead...
CVE-2015-9263: Unrestricted Upload of File with Dangerous Type
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 build 16 and 7.4.0 build 13. It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands...
CVE-2018-1245: Incorrect Authorization
RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component ACM. A remote authenticated malicious user with non-admin privileges could potentially bypass the Java Security Policies. Once bypassed, a...
Node.js third-party modules: Insecure implementation of deserialization in cryo
I would like to report code injection in serialization package cryo It allows execute arbitrary code using custom prototype. Module module name: cryo version: 0.0.6 npm page: https://www.npmjs.com/package/cryo Module Description JSON on steroids. Built for node.js and browsers. Cryo is inspired b...
CVE-2018-0556
CVE-2018-0556 affects Buffalo WZR-1750DHP2 firmware versions 2.30 and earlier. The vulnerability is an OS Command Injection (CWE-78) in the device’s firmware that allows an attacker with network access to execute arbitrary commands on the router. Root cause involves inadequate input handling enab...
ClipBucket beats_uploader Unauthenticated Arbitrary File Upload
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ClipBucket beatsuploader Unauthenticated Arbitrary File Upload", 'Description' = %q This module exploits a vulnerability found in ClipBucket...
CVE-2018-0523
CVE-2018-0523 affects Buffalo WXR-1900DHP2 firmware 2.48 and earlier. The OS Command Injection vulnerability (CWE-78) can allow an attacker on a device-connected network to execute arbitrary OS commands via unspecified vectors. Public sources (JVN/NVD) list this CVE with associated CVSS metrics (...
CVE-2017-7640
CVE-2017-7640 affects the QNAP NAS Media Streaming add-on for the firmware versions 421.1.0.2, 430.1.2.0, and earlier. The vulnerability allows remote attackers to execute arbitrary operating system commands with root privileges on the affected NAS devices. The connected documents confirm the aff...
CMS Made Simple 2.1.6 - Remote Code Execution
CMS Made Simple 2.1.6 - Remote Code Execution Exploit Title: CMS Made Simple 2.1.6 - Remote Code Execution Date: 2018-02-26 Exploit Author: Keerati T. Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: http://s3.amazonaws.com/cmsms/downloads/13570/cmsms-2. 1.6-install.zip Version: 2.1....
