CVE-2022-26174

Beekeeper Studio 3.2.0 is affected by a remote code execution (RCE) via a crafted payload injected into display fields. Multiple connected sources corroborate the vulnerability description (RCE in Beekeeper Studio v3.2.0). The exact root cause is not fully detailed across the provided documents, ...

CVE-2022-25766

The CVE describes a remote code execution in ungit prior to 1.5.20 caused by argument injection in the /api/fetch endpoint. User-controlled values (remote and ref) are injected into the git fetch command, enabling arbitrary command execution on the server. Affected product: ungit (pre-1.5.20). Ro...

CVE-2022-25766 Remote Code Execution (RCE)

The package ungit before 1.5.20 are vulnerable to Remote Code Execution RCE via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values remote and ref are passed to the git fetch command. By injecting some git options it was possible to get arbitrary...

Poultry Farm Management System 1.0 Shell Upload

Title: Poultry Farm Management System 1.0 Remote Code Execution RCE Author: Hejap Zairy Date: 20.07.2022 Vendor: https://www.sourcecodester.com/php/15230/poultry-farm-management-system-free-download.html Software:...

SAP Knowledge Warehouse 7.50 / 7.40 / 7.31 / 7.30 Cross Site Scripting

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: SAP Knowledge Warehouse Vendor URL: https://help.sap.com/viewer/816f1f952d244bbf9dd5063e2a0e66b0/7.5.21/en-US/4dc9605e4a9d6522e10000000a15822b.html Type: Cross-Site Scripting CWE-79 Date...

Inventory Management System 1.0 SQL Injection

Title: Inventory Management System 1.0 Blind SQLi To Rce Author: Hejap Zairy Date: 12.07.2022 Vendor: https://www.vetbossel.in/inventory-management-system-php/ Software: https://cutt.ly/lOZ8lrr Reference: https://github.com/Matrix07ksa Tested on: Windows, MySQL, Apache vulnerability Code php php...

Home Owners Collection Management System 1.0 SQL Injection

Exploit Title: Home Owners Collection Management System 1.0 - Remote Code Execution Blind SQLi to RCE Date: 9/03/2022 Exploit Author: Hejap Zairy Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2021-39383

DWSurvey v3.2.0 was discovered to contain a remote command execution RCE vulnerability via the component /sysuser/SysPropertyAction.java...

CVE-2021-39383

CVE-2021-39383 affects DWSurvey 3.2.0, with a remote code execution vulnerability exposed through the component /sysuser/SysPropertyAction.java. The connected documents confirm the flaw and its impact as RCE, but do not provide any patch version or mitigation details. No exploitation status is do...

Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System

CVE-2022-24990 CVE-2022-24990: Information lea...

Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticate...

CVE-2022-26265

Summary: CVE-2022-26265 affects Contao Managed Edition v1.5.0 and is a remote command execution (RCE) vulnerability exploitable via the php_cli parameter. The NVD entry documents high/severe scores (CVSS v2 7.5/P), and CVSS v3.1 base score 9.8 (CRITICAL). Public references confirm an RCE vector, ...

CVE-2022-25390

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25390

DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...

CVE-2022-25390

CVE-2022-25390 affects DCN Firewall DCME-520. The vulnerability is a remote command execution (RCE) via the host parameter in the file /system/tool/ping.php. The available sources describe the root cause as an RCE path in that script, with high impact on confidentiality, integrity, and availabili...

CVE-2022-25438

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...

CVE-2022-25441

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

Command injection

Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...

CVE-2022-25441

CVE-2022-25441 affects Tenda AC9 v15.03.2.21, with a remote command execution (RCE) vulnerability via the vlanid parameter in SetIPTVCfg. Root cause cited as failure to properly filter special elements of the construction snippet in vlanid. Impact: high-severity RCE over the network with potentia...

CVE-2022-25438

Multiple connected sources (Red Hat, CNVD, CNNVD, PRION, CVE databases) corroborate CVE-2022-25438 as a remote command execution/command-injection vulnerability in Tenda AC9 v15.03.2.21, exploited via the SetIPTVCfg function. Affected component: SetIPTVCfg handling in Tenda AC9 firmware. Root cau...