SIEM EventLog Analyzer Command Injection

The vulnerability of the SIEM EventLog Analyzer software exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system remotely...

Monero: DLL hijacking in Monero GUI for Windows 0.17.3.0 would allow an attacker to perform remote command execution

Summary: Monero for windows contains a DLL hijacking vulnerability that allows to get a meterpreter command metasploit remote shell, The moment the victim runs the program it will execute our payload malicious .dll that will give an attacker a meterpreter console. This will allow the attacker...

pikachu

It is an offensive tool for web application security training. The primary CVE ID is not explicitly mentioned, but the tool is designed to simulate various web application vulnerabilities, including Burt Force 暴力破解漏洞, XSS 跨站脚本漏洞, CSRF 跨站请求伪造, SQL-Inject SQL注入漏洞, RCE 远程命令/代码执行, Files Inclusion...

ROS-2-1808

2.1808 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

ROS-2-1851

2.1851 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

PT-2022-11998 · Spip +2 · Spip +2

Name of the Vulnerable Software and Affected Versions: SPIP version 4.0.0 Description: The issue is a remote command execution vulnerability. To exploit it, an attacker must craft a malicious picture with a double extension, upload it, and then click on it to execute it. Recommendations: For SPIP...

PT-2021-6228

Name of the Vulnerable Software and Affected Versions LBR20 versions prior to 2.6.3.50 RBS50Y versions prior to 2.7.3.22 RBR10 versions prior to 2.7.3.22 RBR20 versions prior to 2.7.3.22 RBR40 versions prior to 2.7.3.22 RBR50 versions prior to 2.7.3.22 RBS10 versions prior to 2.7.3.22 RBS20...

CVE-2021-43439

RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely...

Apache James Server Remote Command Execution Vulnerability

Apache James Server is an open source SMTP and POP3 mail server and NNTP news server developed in pure Java by the Apache Software Foundation.Apache James Server is vulnerable to remote command execution. An attacker could exploit the vulnerability to execute arbitrary code in the browser context...

PT-2021-23845

Name of the Vulnerable Software and Affected Versions iResturant version 1.0 Description The issue allows a remote attacker to execute commands remotely through the Add Review Function. Recommendations For iResturant version 1.0, consider disabling the Add Review Function until a patch is availab...

PT-2021-6182

Name of the Vulnerable Software and Affected Versions NETGEAR D7800 versions prior to 1.0.1.60 NETGEAR DM200 versions prior to 1.0.0.66 NETGEAR EX2700 versions prior to 1.0.1.56 NETGEAR EX6150v2 versions prior to 1.0.1.86 NETGEAR EX6200v2 versions prior to 1.0.1.86 NETGEAR EX6250 versions prior t...

PT-2021-6233

Name of the Vulnerable Software and Affected Versions NETGEAR EX6120 versions prior to 1.0.0.66 NETGEAR EX6130 versions prior to 1.0.0.46 NETGEAR EX7000 versions prior to 1.0.1.106 NETGEAR EX7500 versions prior to 1.0.1.76 NETGEAR EX3700 versions prior to 1.0.0.94 NETGEAR EX3800 versions prior to...

Avalanche mapShare Arbitrary Command Execution

The vulnerability of the mapShare method in the Avalanche mobile device management system is related to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted data...

QNAP QVR Command Injection

The vulnerability of the QNAP QVR video surveillance system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

Cisco Application Policy Infrastructure Controller Command Execution

The vulnerability of the Cisco Application Policy Infrastructure Controller’s web interface and API exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

IBM System x3550 M3 Integrated Management Module Command Execution

The vulnerability of the Integrated Management Module IMM of IBM System x3550 M3 and IBM System x3650 M3 exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.

...

XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry

A flaw was found in xstream. A remote attacker, who has sufficient rights, can execute commands of the host by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

MTN Group: Remote code injection in Log4j on https://mymtn.mtncongo.net - CVE-2021-44228

The website https://mymtn.mtncongo.net was vulnerable to remote code injection due to the CVE-2021-44228 vulnerability in the Log4j library. This critical vulnerability allowed for remote command execution...

meterN 1.2.3 Remote Command Execution

!-- meterN v1.2.3 Authenticated Remote Command Execution Vulnerability Vendor: Jean-Marc Louviaux Product web page: https://www.metern.org Affected version: 1.2.3 and 0.8.3.2 Summary: meterN is a set of PHP/JS files that make a -Home energy metering & monitoring- solution. It accept any meters li...