8509 matches found
CVE-2025-69212
CVE-2025-69212: OpenSTAManager की P7M फ़ाइल प्रोसेसिंग में OS कमांड इंजेक्शन अवलोकन...
CVE-2024-10914
CVE-2024-10914 È stata trovata una vulnerabilità in D-Link DNS-320, DNS-320LW, DNS-325 e DNS-340L fino al 20241028. È stata dichiarata critica. Questa vulnerabilità riguarda la funzione cgiuseradd del file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. La manipolazione dell'argomento name porta a...
CVE-2020-24032
CVE-2020-24032 Descrizione suggerita tz.pl sulle appliance virtuali XoruX LPAR2RRD e STOR2RRD 2.70 consente l'iniezione di comandi del sistema operativo attraverso cmd=set&tz=OS tramite metacaratteri di shell in un fuso orario. Tipo di vulnerabilità: Altro Fornitore del prodotto XoruX s.r.o. Base...
CVE-2021-46422
CVE-2021-46422 Iniezione di comandi OS in router wireless coreani Installazione root@kitploit: git clone https://github.com/kelemaoya/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt Utilizzo Singolo URL pocsuite -r ../CVE-2021-46422.py -u url --verify URL multipli pocsuite -...
Vulnerability-CVE-2025-64446-CVE-2025-58034
Simulazione di sfruttamento di FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Questo documento è solo a scopo didattico e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica FortiWeb è un dispositivo Web Application Firewall WAF utilizzato per...
CVE-2026-74770
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-68861
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
Simulation_CVE-2024-46256
CVE-2024-46256 e CVE-2024-46257 – Simulazione PoC Panoramica Questo repository contiene una Proof of Concept PoC passo-passo, supportata da immagini, che simula due vulnerabilità in Nginx Proxy Manager che consentono l'iniezione di comandi del sistema operativo, portando all'esecuzione remota di...
CVE-2024-3400
CVE-2024-3400 CVE-2024-3400 PAN-OS: Уязвимость внедрения команд ОС в GlobalProtect Проверщик Pan-OS предназначен для определения версии программного обеспечения Palo Alto PAN-OS удаленного портала GlobalProtect или интерфейса управления. Перед запуском скрипта убедитесь, что файл version-table.tx...
EUVD-2026-66674
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-74770
Dell PowerProtect One (versions 20.1.0.0 and below ) is affected by an OS Command Injection vulnerability. A low-privileged remote attacker can exploit this flaw to achieve code execution , with a CVSS 3.1 score of 8.8 (HIGH) — reflecting network attack vector, low complexity, and high impact on ...
CVE-2026-74770
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-71171
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...
CVE-2026-70419
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-68861
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
EUVD-2026-66666
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-68861
Dell PowerProtect One , versions 20.1.0.0 and below , are affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A low-privileged attacker with remote access could exploit this to achieve remote code execution , resulting in high imp...
EUVD-2026-66658
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...
CVE-2026-71171
Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability in its REST API . A high-privileged attacker with remote access could exploit it to achieve remote code execution , with full impact on confidentiality, integrity, and availability. The CVSS 3.1 sco...
CVE-2026-71171
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...