Lucene search
+L

48 matches found

Kitploit
Kitploit
•added 2026/10/01 1:54 p.m.•21 views

CVE-2025-25706

CVE-2025-25706 Description Item: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Тип уязвимости: Удалённое выполнение кода Описан...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 8:29 p.m.•10 views

CVE-2025-25705

CVE-2025-25705 Élément de description : Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Type de vulnérabilité : Exécution de code...

6.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•2 views

CVE-2026-40855: Improper Neutralization of Special Elements used in an OS Command

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...

9.3CVSS6.7AI score0.01592EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2013-6962

Malware in sbrugna...

8.3CVSS6.4AI score0.04131EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-0201

Malware in sbrugna...

7.5CVSS7.5AI score0.02015EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2017-15284

Malware in sbrugna...

9.3CVSS8.8AI score0.0172EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/31 12:47 p.m.•33 views

CVE-2025-48047

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint...

9.4CVSS7.6AI score0.1569EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/29 1:15 p.m.•21 views

CVE-2025-48047

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint...

9.4CVSS0.1569EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/29 12:36 p.m.•71 views

CVE-2025-48047

CVE-2025-48047: AFFECTED product is NetFax Server. An authenticated user can trigger a command injection through unsanitized input to the ping functionality exposed at /test.php. Root cause: improper sanitization of input in the ping endpoint allows execution of arbitrary commands on the server. ...

9.4CVSS7.5AI score0.1569EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/29 12:36 p.m.•11 views

CVE-2025-48047 MICI Network Co. Ltd. NetFax Server Command Injection

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint...

9.4CVSS7.5AI score0.1569EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/29 12:00 a.m.•1 views

CVE-2025-48047: Improper Neutralization of Special Elements used in an OS Command

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint...

9.4CVSS8.2AI score0.1569EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 9:35 p.m.•15 views

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

9.8CVSS7.4AI score0.21393EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/08/02 12:00 a.m.•20 views

Moxa NPort W2x50A Authenticated OS Command Injection in Web Server Ping Functionality (CVE-2018-19659)

An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build18082311. A specially crafted HTTP POST request to /goform/netWebPingGetValue can result in running OS commands as the root user. This is...

9CVSS7.8AI score0.04104EPSS
SaveExploits3References3
NVD
NVD
•added 2023/06/06 12:15 p.m.•26 views

CVE-2023-33381

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router firmware version ARg5.8110WVN0b72. The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function...

7.2CVSS7.4AI score0.22355EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/06 12:00 a.m.•1 views

CVE-2023-33381: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router firmware version ARg5.8110WVN0b72. The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function...

7.2CVSS7.5AI score0.22355EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/06/06 12:00 a.m.•14 views

CVE-2023-33381

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router firmware version ARg5.8110WVN0b72. The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function...

8AI score0.22355EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/06/06 12:00 a.m.•39 views

CVE-2023-33381

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router firmware version ARg5.8110WVN0b72. The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function...

7.6AI score0.22355EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
•added 2022/11/14 12:00 a.m.•60 views

Zoho ManageEngine Command Injection (CVE-2021-43319)

A command injection vulnerability exists in ManageEngine Network Configuration Manager. This vulnerability is due to insufficient validation in the ipaddress field of the ping functionality in add device web interface...

7.5CVSS2.8AI score0.21393EPSS
SaveExploits0
attackerkb
attackerkb
•added 2021/12/22 7:15 p.m.•8 views

CVE-2021-21883

An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.9CVSS7.3AI score0.06061EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/22 7:15 p.m.•44 views

Command injection

An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9CVSS9.6AI score0.06061EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder