QuTS hero QTS QuTScloud Command Execution

The vulnerability of the QuTS hero, QTS, and QuTScloud network devices from operating systems is related to the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

D-Link gena.cgi Arbitrary Command Execution

The vulnerability of the gena.cgi module in D-Link DAP-1650 wireless access points is related to improper validation of input data during the processing of UPnP SUBSCRIBE messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using specially crafted data...

XWiki Admin Tools Command Execution

The vulnerability of the XWiki Admin Tools administrative tool, a component of the XWiki Platform for creating collaborative web applications, is related to insufficient verification of the authenticity of executed queries. Exploiting this vulnerability could allow a malicious actor, operating...

D-Link UPnP SUBSCRIBE Message Handler Arbitrary Command Execution

The vulnerability of the UPnP SUBSCRIBE Message Handler component in the wireless access points from D-Link DAP-1650 is related to improper input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using specially crafted data...

Cisco WAP371 Web Interface Command Execution

The vulnerability in the web-based management interface of the Cisco WAP371 wireless router involves a lack of measures for securing input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

TP-Link Wi-Fi Router Command Execution

The vulnerability of TP-Link Archer AX3000, Archer AX5400, DECO XE200, DECO X50, and Archer AXE75 Wi-Fi routers exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

FortiSIEM Graphical Interface Command Execution

The vulnerability of the FortiSIEM security management graphical interface is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

SUSE CVE-2023-32193

A vulnerability has been identified in which unauthenticated cross-site scripting XSS in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely...

CVE-2023-49716: Improper Neutralization of Special Elements used in a Command

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an authenticated user with network access could run arbitrary commands from a remote computer...

Vinchin Backup & Recovery Command Execution

The vulnerability of the setNetworkCardInfo function in the Vinchin Backup & Recovery software relates to the lack of measures taken to neutralize special elements used in the operating system’s command when processing the NAME parameter. Exploiting this vulnerability allows a malicious actor to...

Vinchin Backup & Recovery Arbitrary Command Execution

The vulnerability of the syncNtpTime function in the SystemHandler.class.php script of the software for backup and recovery solutions, Vinchin Backup & Recovery, is related to the failure to eliminate special elements used in the operating system’s command processing when handling the ntphost...

Vinchan Backup & Recovery Arbitrary Command Execution

The vulnerability of the Vinchin Backup & Recovery software regarding backup and restoration involves a lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...

DLink DIR-610 Multiple Vulnerabilities

The version of DLink installed on the remote host is unsupported and affected by multiple vulnerabilities as referenced in the vendor advisory. - D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php - D-Link DIR-610 devices allow Information Disclosure via...

FortiSIEM Command Injection

The vulnerability of the FortiSIEM security management system exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by sending specially...

QNAP Command Injection

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

QNAP Command Injection

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

Cisco ThousandEyes Enterprise Agent Command Execution Privilege Escalation

The vulnerability in the web interface for managing Cisco ThousandEyes Enterprise Agent software exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands a...

TOTOLINK A3300R setStaticDhcpRules Command Execution

The vulnerability of the setStaticDhcpRules function in TOTOLINK A3300R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A3300R setMacFilterRules Command Execution

The vulnerability of the setMacFilterRules function in TOTOLINK A3300R router microprogramming systems exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

QTS QuTS hero QuTScloud Network Device Command Execution

The vulnerability of QTS, QuTS Hero, and QuTScloud network devices from QNAP operating systems exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary comman...