18576 matches found
PT-2021-10745 · Phpcms · Phpcms
Name of the Vulnerable Software and Affected Versions: phpCMS 2008 sp4 Description: The issue allows remote malicious users to execute arbitrary php commands. This is achieved via the pagesize parameter to the "yp/product.php" endpoint. Recommendations: For phpCMS 2008 sp4, consider restricting...
PT-2021-17474
Name of the Vulnerable Software and Affected Versions ZOLL Defibrillator Dashboard versions prior to 2.2 Description The web application allows a non-administrative user to upload a malicious file, which could enable an attacker to remotely execute arbitrary commands. Recommendations For versions...
RSA Security Analytics Netwitness Platform Command Injection
The vulnerability of the RSA Security Analytics and Netwitness Platform security tools exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
HashiCorp Nomad Remote Command Execution Exploit
This Metasploit module lets you create a batch job on HashiCorp's Nomad service to spawn a shell. The default option is to use the rawexec driver, which runs with high privileges. Development servers and clients explicitly enabling the rawexec plugin can spawn these type of jobs. Regular exec job...
HashiCorp Nomad Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HashiCorp Nomad Remote Command Execution', 'Description' = %q Create a batch job on HashiCorp's Nomad service to spawn a shell. The default optio...
Veritas InfoScale Backup Data Storage Command Execution
The vulnerability of the Veritas InfoScale backup and data storage application, the Veritas Access data storage system, and the Veritas Cluster Server VCS for clustering open systems is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote...
Backdoor.Win32.VB.pld Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/6ff35087d789f7aca6c0e3396984894eB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.VB.pld Vulnerability: Unauthenticated Remote Command Execution Description: The...
Vulnerability fixed in IBM Integration Bus
A vulnerability has been fixed in IBM Integration Bus. A malicious party could potentially exploit the vulnerability in the Javascript lodash module potentially exploit it to execute arbitrary commands on the underlying system. IBM has released updates to fix the vulnerability. For more...
TextPattern CMS 4.8.7 Remote Command Execution
Exploit Title : TextPattern CMS 4.8.7 - Remote Command Execution Authenticated Date : 2021/09/06 Exploit Author : Mert Daş [email protected] Software Link : https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web : https://textpattern.com/ Tested on: Server : Xampp First ...
TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated) Vulnerability
Exploit Title : TextPattern CMS 4.8.7 - Remote Command Execution Authenticated Exploit Author : Mert Daş email protected Software Link : https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web : https://textpattern.com/ Tested on: Server : Xampp First of all we should use file...
TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated)
Exploit Title : TextPattern CMS 4.8.7 - Remote Command Execution Authenticated Date : 2021/09/06 Exploit Author : Mert Daş [email protected] Software Link : https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web : https://textpattern.com/ Tested on: Server : Xampp First ...
Exploit for OS Command Injection in Zeroshell
POC CVE-2019-12725-Remote-Command-Execution ZeroShell 3.9.0 R...
ZOLL Defibrillator Dashboard Code Issue Vulnerability
ZOLL Defibrillator Dashboard is an asset management tool from ZOLL USA. Provides at-a-glance readiness checks for the entire defibrillator fleet, even for defibrillators on multiple campuses and locations. A code issue vulnerability exists in all versions of ZOLL Defibrillator Dashboard prior to...
CVE-2021-23024
On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2021-23024
On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2021-23024
On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Design/Logic Flaw
On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2021-23024
On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2021-23024
The CVE-2021-23024 issue affects F5 BIG-IQ Centralized Management, specifically the BIG-IQ Configuration utility. Affected versions include BIG-IQ 8.x before 8.0.0.1 and all 6.x/7.x lines. The root cause is command injection via the configuration utility due to undisclosed/poor input handling, en...