CVE-2023-38323

OpenNDS before 10.1.3 contains a vulnerability where the status path script entry in the configuration file is not sanitized, allowing attackers with direct or indirect access to that file to execute arbitrary OS commands. CVSSv3.1 base score 9.8 (CRITICAL) with Network attack vector, no privileg...

CVE-2024-22366

Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or...

CVE-2024-22366

The CVE affects Yamaha WLX-series wireless LAN access points (WLX222, WLX413, WLX212, WLX313, WLX202) with firmware versions released up to: WLX222 <24.00.03, WLX413 <22.00.05, WLX212 <21.00.12, WLX313 <18.00.12, WLX202

PT-2024-19366

Name of the Vulnerable Software and Affected Versions Yamaha WLX222 firmware versions prior to Rev.24.00.04 Yamaha WLX413 firmware versions prior to Rev.22.00.06 Yamaha WLX212 firmware versions prior to Rev.21.00.13 Yamaha WLX313 firmware versions prior to Rev.18.00.13 Yamaha WLX202 firmware...

Atlassian Confluence SSTI Injection

This module exploits an SSTI injection in Atlassian Confluence servers. A specially crafted HTTP request uses the injection to evaluate an OGNL expression resulting in OS command execution. Versions 8.5.0 through 8.5.3 and 8.0 to 8.4 are known to be vulnerable. Module Options msf use...

Design/Logic Flaw

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to "Archer AX3000JPV11.1.2 Build 20231115", Archer AX5400 firmware versions prior to "Archer AX5400JPV11.1.2...

CVE-2024-21821

CVE-2024-21821 affects TP-LINK routers (e.g., Archer AX3000, AX5400, AXE75). A network-adjacent authenticated attacker with LAN/Wi‑Fi access can execute arbitrary OS commands due to inadequate input handling in the device OS. CVSS 3.1 base score 8.0 (ADJACENT, LOW{PR:L}, UI: NONE; impact C/I/A: H...

CVE-2024-21773

TP-LINK CVE-2024-21773 is an OS command injection affecting multiple TP-LINK devices. According to JVNDB, affected products include Archer AX3000 (JP) with firmware < 1.1.2 Build 20231115, Archer AX5400 (JP) < 1.1.2 Build 20231115, Deco X50 (JP) < 1.4.1 Build 20231122, and Deco XE200 (JP)

CVE-2024-21737: Improper Control of Generation of Code

In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on...

CVE-2023-35961

Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression...

Metasploit 2023 Annual Wrap-Up: Dec. 29, 2023

As 2023 winds down, we’re taking another look back at all the changes and improvements to the Metasploit Framework. This year marked the 20th anniversary since Metasploit version 1.0 was committed and the project is still actively maintained and improved thanks to a thriving community. Version 6....

CVE-2023-45741

Summary: CVE-2023-45741 affects Buffalo VR-S1000 firmware prior to 2.42 (specifically 2.37 and earlier) and allows an attacker with access to the device’s web management page to execute arbitrary OS commands. The Red Hat/NVD/JVN entries corroborate that the vulnerability enables network-adjacent ...

CVE-2023-48664: Improper Neutralization of Special Elements used in an OS Command

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the execution of arbitrary OS commands on the affected system...

CVE-2023-36650: Improper Validation of Integrity Check Value

A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands as the root Linux user on the host system via forged update packages...

CVE-2023-49897: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2023-4473

A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted URL to a vulnerable device...

Input validation

The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted URL to a vulnerable device...

CVE-2023-4474

The WSGI server microprogramming software on Zyxel NAS326 (firmware version V5.21(AAZF.14)C0 ) and NAS542 (firmware version V5.21(ABAG.11)C0 ) contains a command injection vulnerability. This flaw stems from the improper neutralization of special elements used in operating system commands. An una...

CVE-2023-35138

CVE-2023-35138 describes a command-injection vulnerability in Zyxel NAS326 (firmware v5.21(AAZF.14)C0 and earlier) and NAS542 (firmware v5.21(ABAG.11)C0 and earlier) where the function show_zysync_server_contents can be abused by an unauthenticated attacker to run OS commands via a crafted HTTP P...

CVE-2023-37927: Improper Neutralization of Special Elements used in an OS Command

The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21AAZF.14C0 and NAS542 firmware version V5.21ABAG.11C0 could allow an authenticated attacker to execute some operating system OS commands by sending a crafted URL to a vulnerable device...