429 matches found
Zyxel NWA1100-N 操作系统命令注入漏洞
The Zyxel NWA1100-N is a wireless access point from China Heqin Zyxel. An operating system command injection vulnerability exists in the Zyxel NWA1100-N version 1.00AACE.1C0, which stems from the presence of a command injection vulnerability that could allow an unauthenticated attacker to execute...
TOTOLINK AC1200 安全漏洞
The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from an operating system command injection vulnerability that stems from the setDiagnosisCfg method failing to properly filter constructed command special characters,...
CVE-2024-42744
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUser. Authenticated Attackers can send malicious packet to execute arbitrary commands...
CVE-2024-6917
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection.This issue affects Veribase Order Management: before v4.010.2...
FFRI AMC vulnerable to OS command injection
Overview FFRI AMC provided by FFRI Security, Inc. is a management console for the endpoint security product FFRI yarai and ActSecure X. FFRI AMC contains an OS command injection vulnerability CWE-78. It is exploitable when the notification program setting is enabled, the executable file path is...
Smart PLC AC14xx and Smart PLC AC4xxS Operating System Command Injection Vulnerability
The ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS are a series of hosts/gateways from ifm electronic Germany. An operating system command injection vulnerability exists in Smart PLC AC14xx and Smart PLC AC4xxS versions 4.3.17 and earlier, which originates from a remote...
ELECOM WRC-X5400GS-B和WRC-X5400GSA-B 安全漏洞
The ELECOM WRC-X5400GS-B is a Wi-Fi Gigabit router from ELECOM Japan. A security vulnerability exists in the ELECOM WRC-X5400GS-B v1.0.10 and earlier and WRC-X5400GSA-B v1.0.10 and earlier, which stems from a contained operating system command injection vulnerability...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. Ruijie Networks RG-UAC suffers from an operating system command injection vulnerability, which originates from an unknown...
PT-2024-4482 · Smartec +1 · Smartec St-Fr041Me +2
Name of the Vulnerable Software and Affected Versions: ZkTeco-based OEM devices version ZAM170-NF-1.8.25-7354-Ver1.0.0 Description: The issue is related to an OS Command Injection vulnerability, which allows for the execution of arbitrary commands. This vulnerability affects ZkTeco-based OEM...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240506 and earlier versions, which...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC version 20240428 and earlier versions,...
PT-2024-25684
Name of the Vulnerable Software and Affected Versions sagemaker-python-sdk versions prior to 2.214.3 Description The capture dependencies function in the sagemaker.serve.save retrive.version 1 0 0.save.utils module allows for potentially unsafe Operating System OS Command Injection if an...
MailCleaner 操作系统命令注入漏洞
MailCleaner is an anti-virus email gateway from MailCleaner, Inc. An operating system command injection vulnerability exists in MailCleaner version 2023.03.14, which stems from the presence of an operating system command injection vulnerability...
Rapid7 MailCleaner 操作系统命令注入漏洞
Rapid7 MailCleaner is a set of penetration testing frameworks from the US company Rapid7. The framework supports vulnerability verification and security assessment, among others. MailCleaner version 2023.03.14 suffers from an operating system command injection vulnerability that stems from the...
Rapid7 MailCleaner 安全漏洞
Rapid7 MailCleaner is a set of penetration testing frameworks from the US company Rapid7. The framework supports vulnerability validation and security assessment, among others. A security vulnerability exists in MailCleaner version 2023.03.14, which stems from the presence of an operating system...
CVE-2024-26023
OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands...
TBK DVR-4104、DVR-4216 操作系统命令注入漏洞
TBK DVR-4104 is a digital video recorder from TBK. An OS command injection vulnerability exists in TBK DVR-4104, DVR-4216 version 20240412 and earlier versions, which stems from the fact that incorrect operation of the parameter mdb/mdc can lead to OS command injection...
CVE-2023-47415
Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the clitext parameter...
TP-LINK ER7206 Operating System Command Injection Vulnerability
The TP-LINK ER7206 is a multifunction Gigabit router from China P&L TP-LINK. An operating system command injection vulnerability exists in the TP-LINK ER7206 version 1.3.0 build 20230322 Rel.70591, which stems from a specially crafted HTTP request that could lead to arbitrary command injection. T...
QNAP Operating System Command Injection Vulnerability in Multiple Products
QNAP Systems QuTScloud and others are products of China Weilian Technology QNAP Systems.QNAP Systems QuTScloud is a cloud-optimized version of the QNAP NAS operating system.QNAP Systems QTS is an operating system for entry- to mid-range QNAP NAS use. QNAP Systems QuTS hero is an operating system...