10006 matches found
CVE-2023-33273
CVE-2023-33273 affects DTS Monitoring 3.57.0 via the url parameter in the WGET check function, which is vulnerable to OS command injection (blind). This is the root cause described across multiple sources, with an impact of potential command execution. No exploit details are provided in the docum...
CVE-2023-33268
CVE-2023-33268 affects DTS Monitoring 3.57.0. The vulnerability is in the SSL Certificate check function where the port parameter can be exploited to perform an OS command injection (blind). Impact details in connected sources align on the same issue; no exploit specifics or CVSS vectors beyond w...
CVE-2023-33270
CVE-2023-33270 affects DTS Monitoring 3.57.0. The issue is a blind OS command injection in the url parameter of the Curl check function, enabling arbitrary command execution with high impact (C/H/I/H) per the CVSS 3.1 vector. Connected sources confirm the vulnerable component and root cause but d...
PT-2023-8536 · Fortinet · Fortisiem
Name of the Vulnerable Software and Affected Versions: Fortinet FortiSIEM versions 6.4.0 through 6.4.2 Fortinet FortiSIEM versions 6.5.0 through 6.5.2 Fortinet FortiSIEM versions 6.6.0 through 6.6.3 Fortinet FortiSIEM versions 6.7.0 through 6.7.8 Fortinet FortiSIEM versions 7.0.0 through 7.0.2...
PT-2023-26840 · Furuno Systems · Acera 1310 +13
Name of the Vulnerable Software and Affected Versions: FURUNO SYSTEMS ACERA 1320 firmware versions 01.26 and earlier FURUNO SYSTEMS ACERA 1310 firmware versions 01.26 and earlier FURUNO SYSTEMS ACERA 1210 firmware versions 02.36 and earlier FURUNO SYSTEMS ACERA 1150i firmware versions 01.35 and...
CVE-2023-5301
A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file albumadd.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed t...
CVE-2023-5301
CVE-2023-5301 affects DedeCMS 5.7.111, where the AddMyAddon function in album_add.php is vulnerable due to improper handling of the albumUploadFiles parameter, enabling OS command injection. The vulnerability is exploitable remotely and, per multiple sources, can lead to arbitrary command executi...
CVE-2023-5301 DedeCMS album_add.php AddMyAddon os command injection
A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file albumadd.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed t...
PT-2023-6087 · Fortinet · Fortiwlm
Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: The issue is related to an improper neutralization of special elements used in an OS command, also known as 'OS command injection'. Thi...
CVE-2023-3767
An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...
Command injection
An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter...
Exploit for Improper Input Validation in Imagemagick
ImageTragickCVE-2023-34152 CV...
CVE-2023-3767
CVE-2023-3767 affects EasyPHP Webserver v14.1. An OS command injection flaw exists in the /index.php?zone=settings handler that an attacker can exploit to gain full system access. The root cause is improper handling of the settings parameter allowing arbitrary command execution. Documented impact...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to OS command injection (CVE-2022-35717)
Summary An OS command injection vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-35717 DESCRIPTION: IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a...
CVE-2023-23362 QTS, QuTS hero, QuTScloud
An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build...
CVE-2023-23362
CVE-2023-23362 is an OS command injection affecting QNAP QTS, QuTS Hero, QuTScloud. The issue allows remote authenticated users to execute commands via vulnerable QNAP devices. Public disclosures in the provided sources confirm the vulnerability and list fixed versions: QTS 5.0.1.2376 build 20230...
CVE-2023-28614
Freewill iFIS aka SMART Trade 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page...
Command injection
Freewill iFIS aka SMART Trade 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page...
