1045 matches found
CVE-2023-35138
CVE-2023-35138 describes a command-injection vulnerability in Zyxel NAS326 (firmware v5.21(AAZF.14)C0 and earlier) and NAS542 (firmware v5.21(ABAG.11)C0 and earlier) where the function show_zysync_server_contents can be abused by an unauthenticated attacker to run OS commands via a crafted HTTP P...
CVE-2023-38316
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt...
CVE-2023-47675
CubeCart before 6.5.3 is vulnerable to CVE-2023-47675: an OS command injection allows a remote authenticated admin to execute arbitrary commands. The issue affects CubeCart versions prior to 6.5.3; no impact is stated for later versions. The recommended fix is to update to CubeCart 6.5.3 or later...
CVE-2023-38316
Summary: CVE-2023-38316 affects OpenNDS Captive Portal prior to v10.1.2. When the custom unescape callback is enabled, an attacker can execute arbitrary OS commands by placing them in the URL portion of HTTP GET requests. The issue is fixed in OpenNDS to v10.1.3, with patches in OpenWrt master, O...
CVE-2023-38316
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt...
Cisco IOX XE unauthenticated OS Command Execution Exploit
msf use auxiliary/admin/http/ciscoiosxeosexeccve202320273 msf auxiliaryciscoiosxeosexeccve202320273 show actions ...actions... msf auxiliaryciscoiosxeosexeccve202320273 set ACTION msf auxiliaryciscoiosxeosexeccve202320273 show options ...show and set options... msf...
Cisco IOX XE unauthenticated OS command execution
This module leverages both CVE-2023-20198 and CVE-2023-20273 against vulnerable instances of Cisco IOS XE devices which have the Web UI exposed. An attacker can execute arbitrary OS commands with root privileges. This module leverages CVE-2023-20198 to create a new admin user, then authenticating...
CVE-2023-45869
CVE-2023-45869 affects ILIAS 7.25 (2023-09-12). The issue resides in the ilUtil::execQuoted() function (via the exec() call) which lacks input sanitization, allowing any authenticated user to remotely execute arbitrary operating system commands when a highly privileged account loads an XSS payloa...
CVE-2023-46306
NetModule Router Software (NRSW) versions affected: 4.6.x before 4.6.0.106 and 4.8.x before 4.8.0.101. The web admin interface constructs OS commands from unsanitized input in /admin/gnssAutoAlign.php device_id, due to a race/cleanup timing issue enabling execution of arbitrary commands with elev...
Command injection
An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerabilit...
CVE-2023-36618
Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users...
CVE-2023-36618
CVE-2023-36618 affects Atos Unify OpenScape Session Border Controller (SBC) through OpenScape V10 R3.01.03, where low-privileged authenticated users can execute OS commands as root due to an authentication deficiency. The issue is documented across multiple sources (Red Hat, NVD, CVE list) and is...
CVE-2023-40193
Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-38563
Archer C1200 firmware versions prior to 'Archer C1200JPV2230508' and Archer C9 firmware versions prior to 'Archer C9JPV3230508' allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands...
CVE-2023-37284
Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...
Design/Logic Flaw
Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...
Design/Logic Flaw
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...
Design/Logic Flaw
Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...