18526 matches found
TOTOLINK X5000R settings/setTracerouteCfg Command Execution
The vulnerability of the settings/setTracerouteCfg component of the TOTOLINK X5000R router software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
managing data storage on
The vulnerability is related to insufficient checking of arguments passed to the command. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
DevTools Mozilla Firefox Thunderbird Arbitrary Command Execution
The vulnerability of the DevTools suite for web development in the Mozilla Firefox browser and Thunderbird email client is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2023-46747
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support EoTS...
CVE-2023-46748: Improper Neutralization of Special Elements used in an SQL Command
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Note: Software...
CVE-2023-45869: Improper Neutralization of Input During Web Page Generation
ILIAS 7.25 2023-09-12 allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload. The injected commands are executed via the exec function in the execQuoted method of the ilUtil class...
Stable Diffusion WebUI Remote Command Execution Vulnerability
Stable Diffusion WebUI is an AI image processing tool developed by AUTOMATIC1111 based on the Stable Diffusion AI model, which supports file creation and image creation. A remote command execution vulnerability in Stable Diffusion WebUI, which is caused by not filtering user input when installing...
ILIAS Security Vulnerabilities
ILIAS is an open source learning management system. A security vulnerability exists in ILIAS version 7.25 that originates from allowing any authenticated user to remotely execute arbitrary operating system commands...
CVE-2023-46416
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...
CVE-2023-46415
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...
CVE-2023-46415
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...
CVE-2023-46414
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub 41D494 function...
CVE-2023-46418
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub412688 function...
CVE-2023-46423
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub417094 function...
CVE-2023-46416
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub The 41A414 function...
CVE-2023-46421
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411D00 function...
CVE-2023-46414
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub 41D494 function...
CVE-2023-46420
TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...