15574 matches found
CVE-2021-40556
A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacke...
PT-2022-26440 · Generex · Generex Cs141
Name of the Vulnerable Software and Affected Versions: Generex CS141 versions 2.08 through 2.10 Description: The issue allows remote command execution by administrators via a web interface that reaches run update in /usr/bin/gxserve-update.sh. This can occur, for example, via a reverse shell...
CVE-2022-42457
Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches runupdate in /usr/bin/gxserve-update.sh e.g., command execution can occur via a reverse shell installed by install.sh...
CVE-2021-40556
A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacke...
CVE-2022-42457
Generex CS141 (UPS Adapter) has a remote code execution in versions up to 2.10 via the web interface calling run_update in /usr/bin/gxserve-update.sh, which extracts and executes install.sh from a tarball (untested tarball payload). Public evidence across multiple sources (RH advisory, CNVD, CNNV...
Backdoor.Win32.Delf.eg MVID-2022-0647 Remote Command Execution
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/de6220a8e8fcbbee9763fb10e0ca23d7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.eg Vulnerability: Unauthenticated Remote Command Execution Description...
CVE-2022-40277
Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properly validate the schema/protocol of existing links in the markdown file before...
PT-2022-25315 · Joplin · Joplin
Name of the Vulnerable Software and Affected Versions: Joplin version 2.8.8 Description: The issue allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markdown file, via Joplin. This is possible because the application does not properl...
PT-2022-5875 · D Link · D-Link Dnr-322L
Name of the Vulnerable Software and Affected Versions: D-Link DNR-322L versions 2.60B15 and earlier Description: The issue is related to a data integrity failure in the 'Backup Config' feature, allowing an authenticated attacker to execute OS level commands on the device. This can be exploited by...
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary commands.
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers lies in the lack of measures taken to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary commands.
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers lies in the lack of measures taken to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary commands.
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers lies in the lack of measures taken to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Exploit for Path Traversal in Wso2 Api_Manager
WSO2 Arbitrary File Upload to Remote Com...
Exploit for Argument Injection in Atlassian Bitbucket
CVE-2022-36804-POC 🕷️ Bitbucket CVE-2022-36804 unauthenticated...
The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows, related to the lack of measures taken to clean data at the operating level, allows attackers to execute arbitrary commands.
The vulnerability of Mozilla Firefox and Mozilla Firefox ESR browsers for Windows is related to the lack of measures taken to clean data at the operating level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
CVE-2022-37878
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...
CVE-2022-37879
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...
Design/Logic Flaw
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...
CVE-2022-37880
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...
CVE-2022-37878
CVE-2022-37878 affects Aruba ClearPass Policy Manager web-based management interface. The issue allows remote authenticated users to execute arbitrary commands on the underlying OS with root privileges, potentially leading to full system compromise. Affected versions are 6.10.x <= 6.10.6 and 6...