Command injection

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zonegeteffectdevices function in...

CVE-2017-14176

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117...

Design/Logic Flaw

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117...

CVE-2017-14176

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117...

CVE-2017-14176

CVE-2017-14176 affects Bazaar (bzr) 2.7.0 and earlier, via a vulnerability in subprocess SSH handling when using bzr+ssh URLs with an initial dash in the hostname. Connected data confirms the issue impacts the bzr 2.7.0- series; no patch is available currently. Exploitation details are not provid...

openSUSE Security Update : cacti / cacti-spine (openSUSE-2017-1290)

This update for cacti, cacti-spine to version 1.1.28 fixes the following issues : - CVE-2017-16641: Potential code execution vulnerability in RRDtool functions boo1067166 - CVE-2017-16660: Remote execution vulnerability in logging function boo1067164 - CVE-2017-16661: Arbitrary file read...

CVE-2017-16934

The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a changepassword.csp request, which supports a...

Exploit for OS Command Injection in Gnu Bash

Hellshocker 0.1.1 Tool to exploit Shellshock vulnerability...

Security update for cacti, cacti-spine (important)

This update for cacti, cacti-spine to version 1.1.28 fixes the following issues: - CVE-2017-16641: Potential code execution vulnerability in RRDtool functions boo1067166 - CVE-2017-16660: Remote execution vulnerability in logging function boo1067164 - CVE-2017-16661: Arbitrary file read...

QNAP Video Station Command Injection Vulnerability

QNAP QTS is a Turbo NAS operating system from QNAP Systems that provides file storage, management, backup, multimedia applications and security monitoring. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. Video Station is one of the video...

openSUSE: Security Advisory for cacti (openSUSE-SU-2017:3051-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the HTTP server of the Trend Micro Password Manager allows a hacker to execute arbitrary commands.

The vulnerability of the Trend Micro Password Manager HTTP server relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the URL parameters “apiopenUrlInDefaultBrowser” and “apishowSB” remotely...

Synology Photo Station Multiple Vulnerabilities (SA_17_35)

Synology Photo Station is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ROOT xrootd Command Injection Vulnerability

ROOT xrootd is a scalable data repository that features fault-tolerant access and low-latency access. A command injection vulnerability exists in ROOT xrootd 4.6.0 and earlier versions. A remote attacker can exploit this vulnerability to execute commands...

Samba Memory Misreference Vulnerability

Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A memory misreference...

CVE-2015-3934

Multiple SQL injection vulnerabilities in Fiyo CMS 2.01.9.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to apps/apparticle/controller/rating.php or 2 user parameter to user/login...

Design/Logic Flaw

A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user...

CVE-2017-5719

A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user...

CVE-2017-5712

CVE-2017-5712 is a buffer overflow in Intel Manageability Engine Firmware (AMT) affecting ME/AMT versions 8.x–11.20. The vulnerability allows a remote attacker with Admin access to execute arbitrary code with AMT execution privileges (CVSSv3: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; base score 7.2). ...

USN-3486-1: Samba vulnerabilities

Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory when processing certain SMB1 requests. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2017-14746 Volker Lendecke discovered that Samba incorrectly cleared memory when returning data to a...