CVE-2022-27269

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component configovpn. This vulnerability is triggered via a crafted packet...

CVE-2022-27268

InHand Networks InRouter 900 Industrial 4G Router is affected. Versions prior to 1.0.0.r11700 contain a remote code execution (RCE) vulnerability in the get_cgi_from_memory component, triggerable by a crafted packet. The issue is documented with a clear affected-version range and remediation guid...

CVE-2022-27270

CVE-2022-27270 affects InHand Networks InRouter 900 Industrial 4G Router before version 1.0.0.r11700. The vulnerability is an RCE via the ipsec_secrets component, triggered by a crafted packet. Affected firmware versions are prior to 1.0.0.r11700; the recommended remediation is to upgrade to 1.0....

CVE-2022-27270

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component ipsecsecrets. This vulnerability is triggered via a crafted packet...

CVE-2022-27271

CVE-2022-27271 affects InHand Networks InRouter 900 Industrial 4G Router. The vulnerability is an RCE via the python-lib component, triggered by a crafted packet. Affected firmware versions are prior to v1.0.0.r11700. Public sources in the connected documents (Red Hat, PT-Platform) corroborate th...

CVE-2022-27272

CVE-2022-27272 affects InHand Networks InRouter 900 Industrial 4G Router up to version v1.0.0.r11700. The vulnerability is an RCE triggered by a crafted packet via function sub_1791C. Affected component is the router’s firmware; impact is remote code execution with potential full compromise. Reme...

CVE-2022-27273

InHand Networks InRouter 900 Industrial 4G Router is affected by CVE-2022-27273. The vulnerability allows remote code execution via the function sub_12168 when processing a crafted packet, affecting versions prior to 1.0.0.r11700. Remediation is to update to version 1.0.0.r11700 or later. Other s...

CVE-2022-27275

CVE-2022-27275 affects InHand Networks InRouter 900 Industrial 4G Router. A remote code execution vulnerability exists in the vulnerable function sub_122D0, triggered by a crafted packet. Impact is RCE on affected devices. Affected versions are prior to v1.0.0.r11700. Mitigation: update to v1.0.0...

CVE-2022-27274

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub12028. This vulnerability is triggered via a crafted packet...

CVE-2022-27275

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub122D0. This vulnerability is triggered via a crafted packet...

CVE-2022-27274

CVE-2022-27274 affects InHand Networks InRouter 900 Industrial 4G Router. A remote code execution vulnerability exists in the function sub_12028 that can be triggered by a crafted packet. Affected versions are prior to 1.0.0.r11700. The Red Hat and other records corroborate the same vulnerability...

CVE-2022-27276

CVE-2022-27276 affects InHand Networks InRouter 900 Industrial 4G Router. The vulnerability is a remote code execution via function sub_10F2C triggered by a crafted packet. Affected versions are prior to 1.0.0.r11700; remediation is to upgrade to 1.0.0.r11700 or later. Documented impact is high/c...

CVE-2022-27276

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the function sub10F2C. This vulnerability is triggered via a crafted packet...

GHSA-86R3-4GQ8-XW8Q Remote Code Execution in Laravel

Withdrawn This advisory has been withdrawn because it is not a security issue and the CVE has been revoked. Original Description A Remote Code Execution RCE vulnerability exists in h laravel 5.8.38 via an unserialize pop chain in 1 destruct in \Routing\PendingResourceRegistration.php, 2 cal in...

CVE-2021-43503

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-43503

Removed by vendor...

E-Commerce Website 1.0 Shell Upload

Ecommerce Website Unrestricted File Upload + RCE Author: D4rkP0w4r Note = Create account, don't need login client or admin Description = Create account upload web shell at Customer Image Step to Reproduct Register - upload web shell at Customer Image - clicked Register button Exploit Upload web...

School Club Application System 1.0 Local File Inclusion

Title: School Club Application System 1.0 LFI To RCE Author: Hejap Zairy Date: 08.04.2022 Vendor: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/scas0.zip Referenc...

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965 Spring Framework RCE CVE-2022-22965 Nmap NSE...

CSZCMS 1.3.0 SSRF / LFI / Remote Code Execution Vulnerabilities

Title: CSZCMS V1.3.0 - SSRF To LFI To Rce Author: Hejap Zairy Vendor: https://sourceforge.net/projects/cszcms/files/install/ Software: https://liquidtelecom.dl.sourceforge.net/project/cszcms/install/CSZCMS-V1.3.0.zip Reference: https://github.com/Matrix07ksa Tested on: Windows, MySQL, Apache 1 -...