VulnCheck KEV: CVE-2020-26878

Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API /service/v1/createUser endpoint, injecting arbitrary commands that will be executed as root user via web.py...

Multiple TP-Link Wireless Extender Remote Command Execution Vulnerabilities

TP-Link WA850RE and others are all TP-Link's wireless extenders. A number of wireless extenders have remote command execution vulnerabilities, which can be exploited by attackers to execute unauthorized remote commands...

Bently Nevada Monitoring Arbitrary Command Execution

The vulnerability of Bently Nevada 3701 monitoring and protection systems lies in the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2019-25071

CVE-2019-25071 affects Apple iPhone on iOS up to 12.4.1, where playing an audio/video file can initiate Siri on the same device, enabling commands to be executed remotely. Public demonstrations exist; Apple disputes security implications. Remediation noted as upgrading to iOS 13.0 or later.

CVE-2019-25071 Apple iOS Siri Self privileges management

A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been...

Apple iPhone security vulnerabilities

The Apple iPhone is a smartphone from Apple, an American Apple Apple company. A security vulnerability exists in Apple iPhone versions prior to 12.4.1, which stems from the ability to play an audio or video file to launch Siri on the same device, allowing commands to be executed remotely...

CVE-2019-25071: Improper Privilege Management

A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been...

CVE-2022-31767

IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 227980...

Directory Management System add-directory.php SQL Injection

The vulnerability of the add-directory.php component of the Directory Management System relates to the ability to execute commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely, using the fullname parameter...

Cisco FirePOWER Services Software Command-Line Interface Arbitrary Command Execution

The vulnerability of the command-line interface analyzer in Cisco FirePOWER Services Software for ASA is related to errors in processing uncertain command parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges remotely...

VulnCheck KEV: CVE-2021-20655

FileZen V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2 allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

Path traversal

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774

CVE-2022-29774 affects iSpy v7.2.2.0, exposing remote command execution via path traversal. The vulnerability occurs in iSpyConnect/iSpy and allows an attacker to access or execute commands through crafted paths. Core details about the exact vulnerable component and root cause are not elaborated ...

CVE-2022-29774: Improper Limitation of a Pathname to a Restricted Directory

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

PT-2022-19823 · Ispy · Ispy

Name of the Vulnerable Software and Affected Versions: iSpy version 7.2.2.0 Description: The issue allows for remote command execution via path traversal. Recommendations: For iSpy version 7.2.2.0, at the moment, there is no information about a newer version that contains a fix for this...

Ubuntu 18.04 LTS : SPIP vulnerabilities (USN-5482-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5482-1 advisory. It was discovered that SPIP incorrectly validated inputs. An authenticated attacker could possibly use this issue to execute arbitrary code. This issue...