PT-2022-4623 · Centrecom · Centrecom Ar260S V2

Name of the Vulnerable Software and Affected Versions: CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 Description: The issue is related to an undocumented hidden command that can be executed from the telnet function, allowing a remote authenticated attacker to execute an arbitrary OS...

PT-2022-7699

Name of the Vulnerable Software and Affected Versions D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description The issue is related to the hnap main function of the D-Link GO-RT-AC750 router's firmware, which fails to neutralize special elements used in an...

mySCADA myPRO Command Injection

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

FXOS CLI Command Execution Root Privilege

The vulnerability of the command-line interface CLI of the networking operating system FXOS exists because measures to neutralize the special elements used in the operating system’s commands have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Movable Type XMLRPC Command Execution

The vulnerability of the XMLRPC API interface of the Movable Type content management system is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

GitLab: Remote Command Execution via Github import

Summary This is very similar to https://about.gitlab.com/releases/2022/08/22/critical-security-release-gitlab-15-3-1-released/Remote%20Command%20Execution%20via%20Github%20import and allows arbitrary redis commands to be injected when imported a GitHub repository. When importing a GitHub repo the...

GitLab 11.3.4 < 15.1.5, 15.2.x < 15.2.3, 15.3.x < 15.3.1 RCE Vulnerability

GitLab is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; ...

CVE-2022-35733

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier allows a remote unauthenticated attacker to execute an arbitrary OS...

Tenda AC18 Remote Command Execution Vulnerability

Tenda AC18 is a router from Tenda, a Chinese company. Tenda AC18 is vulnerable to remote command execution, which can be exploited by attackers to execute arbitrary commands on the system...

Zengenti Contensis Classic Authorization Issue Vulnerability

Zengenti Contensis Classic is a content management system from Zengenti UK. A security vulnerability exists in Zengenti Contensis Classic prior to version 15.2.1.79, which stems from a file upload wizard that fails to properly check if a user has been authenticated. The vulnerability can be...

PT-2022-4366

Name of the Vulnerable Software and Affected Versions UNIMO digital video recorders versions v1.0.20.13 and earlier UNIMO digital video recorders versions v2.0.20.13 and earlier Description The issue is related to the absence of authentication for a critical function in the firmware of UNIMO...

UNIMO Technology Digital Video Recorder Access Control Vulnerability

UNIMO Technology Digital Video Recorder is a player from UNIMO Technology. UNIMO Technology Digital Video Recorder suffers from an Access Control Error vulnerability that stems from a lack of authentication for critical functions. A remote attacker could use this vulnerability to execute arbitrar...

PT-2022-6319 · Zyxel · Zyxel Nwa110Ax

Name of the Vulnerable Software and Affected Versions: Zyxel NWA110AX versions prior to 6.50ABTG.0C0 Description: The issue is related to an improper check for unusual conditions in the firmware, which could allow a LAN attacker to cause a temporary denial-of-service DoS by sending crafted VLAN...

Cisco IOS XE Command Injection Root Privilege

The vulnerability of Cisco IOS XE web interfaces exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject commands into the base operating system with root privileges, as a result of sending...

PT-2022-7224 · Proscend · Proscend M330-W +7

Name of the Vulnerable Software and Affected Versions: Proscend M330-w versions Proscend M330-W5 versions Proscend M350-5G versions Proscend M350-W5G versions Proscend M350-6 versions Proscend M350-W6 versions Proscend M301-G versions Proscend M301-GW versions Proscend ICR 111WG versions...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

Command injection

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

The CVE-2022-35201 entry concerns the Tenda-AC18 router with firmware version v15.03.05.05, described as having a remote command execution (RCE) vulnerability. The connected records consistently identify this vulnerability as affecting Tenda-AC18 V15.03.05.05 and classify the impact as remote cod...