18532 matches found
CVE-2023-37656
WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...
CVE-2023-37659: Improper Control of Generation of Code
xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...
Spring Cloud 3.2.2 - Remote Command Execution Exploit
Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...
CVE-2023-37656
WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...
Spring Cloud 3.2.2 - Remote Command Execution (RCE)
Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Date: 07/07/2023 Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...
HPESBNW04490 rev.2 - HPE ArubaOS, Multiple Vulnerabilities
Potential Security Impact: Local: Cross-Site Scripting XSS; Remote: Arbitrary Command Execution, Cross-Site Scripting XSS, Denial of Service DoS, Directory Traversal, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Operating System Softwar...
CVE-2021-42081
An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC...
CVE-2021-42081 Authenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.355
An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC...
CVE-2021-4406 Authenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others
An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC go to the alert manager open the ITSM tab add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss ' whitespaces are tab characters click add click apply create a test alert The tes...
CVE-2021-4406 Authenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others
An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC go to the alert manager open the ITSM tab add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss ' whitespaces are tab characters click add click apply create a test alert The tes...
ArubaOS Command Line Arbitrary Command Execution
The vulnerability of the command-line interface of ArubaOS exists because measures to neutralize the special elements used in the operating system’s command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2023-12396 · Osnexus · Quantastor
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an authenticated administrator to remotely execute arbitrary shell commands via the API. This could potentially lead to unauthorized access and control of the syste...
CVE-2021-42081: Improper Neutralization of Special Elements used in an OS Command
An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC http://...
DaillyTools Remote Command Execution
==================================================================================================================================== | Title : DaillyTools v1 command execution Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit ...
CVE-2023-36969
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
CVE-2023-36969
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
CVE-2023-36969
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
Design/Logic Flaw
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
CVE-2023-36969
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...
PLC CODESYS Development System EnginePlugin Command Execution
The vulnerability of the EnginePlugin plugin of the PLK CODESYS Development System is related to the deserialization of unreliable data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...