Lucene search
+L

15748 matches found

GithubExploit
GithubExploit
added 2022/04/12 2:45 a.m.29 views

Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System

It is an exploit module for a remote command execution vulnerabi...

9.8CVSS9.2AI score0.83553EPSS
SaveExploits9
GithubExploit
GithubExploit
added 2022/04/12 2:45 a.m.481 views

Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System

It is an exploit module for CVE-2022-24990, a TerraMaster TOS Un...

9.8CVSS9.4AI score0.83553EPSS
SaveExploits9
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:00 a.m.11 views

The vulnerability of the httpd-demon microprogramming system for TP-Link TL-WPA4220 allows a hacker to execute arbitrary commands.

The vulnerability of the httpd-demon microprogramming system for TP-Link TL-WPA4220 relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a special...

9CVSS8.1AI score0.03653EPSS
SaveExploits1References6Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2022/04/11 12:00 a.m.6 views

VulnCheck KEV: CVE-2022-24990

TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint...

9.8CVSS7.6AI score0.83553EPSS
SaveExploits9References1
Packet Storm
Packet Storm
added 2022/04/07 12:00 a.m.262 views

Backdoor.Win32.Tiny.a Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9fa664bc52e1aa46a09ac51aaa6c7384.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Tiny.a Vulnerability: Unauthenticated Remote Command Execution Description: The malwa...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/04/07 12:00 a.m.279 views

Backdoor.Win32.Verify.h Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/82641dabbb1f73dd775e200466a07ec1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Verify.h Vulnerability: Unauthenticated Remote Command Execution Description: The...

SaveExploits0
Packet Storm
Packet Storm
added 2022/04/07 12:00 a.m.263 views

Backdoor.Win32.Wisell Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/837ec70bfb305b5c862ff9b04e70a318.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wisell Vulnerability: Unauthenticated Remote Command Execution Description: The malwa...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/04/05 12:00 a.m.95 views

Sitecore XP 7.5 <= 7.5.2 / 8.0 <= 8.0.7 / 8.1 <= 8.1.3 / 8.2 <= 8.2.7 RCE

The remote host is running a version of Sitecore XP that is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability. Note that Nessus has not test...

10CVSS8.8AI score0.97904EPSS
SaveExploits4References1
Packet Storm
Packet Storm
added 2022/04/04 12:00 a.m.289 views

Backdoor.Win32.Wollf.h Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/867c6b432ccd4aa51adc5e2722a4b144.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.h Vulnerability: Unauthenticated Remote Command Execution Description: The...

0.1AI score
SaveExploits0
OSV
OSV
added 2022/04/01 11:15 p.m.6 views

CVE-2021-32974

Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands...

9.8CVSS7.4AI score0.02697EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/01 10:17 p.m.94 views

CVE-2021-32974

CVE-2021-32974 affects Moxa NPort IAW5000A-I/O Series Serial Device Server with firmware 2.2 or earlier. Root cause: improper input validation in the built-in web server, enabling a remote attacker to execute commands. Impact: remote command execution (high severity). Affected products: NPort IAW...

10CVSS9.6AI score0.02697EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/04/01 12:00 a.m.9 views

PT-2022-10169 · Moxa · Moxa Nport Iaw5000A-I/O

Name of the Vulnerable Software and Affected Versions: Moxa NPort IAW5000A-I/O series firmware versions 2.2 or earlier Description: The issue is related to improper input validation in the built-in web server, which may allow a remote attacker to execute commands. Recommendations: For Moxa NPort...

10CVSS9.3AI score0.02697EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/04/01 12:00 a.m.14 views

PT-2022-2516 · D Link · D-Link Dir-823-Pro

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823-Pro version 1.0.2 Description: The issue is related to the implementation of the SetNTPserverSeting function in the D-Link DIR-823-Pro wireless router's firmware, which fails to properly sanitize data at the management level...

10CVSS9.8AI score0.28179EPSS
SaveExploits1References5
OSV
OSV
added 2022/03/31 8:15 a.m.9 views

CVE-2022-24299

Improper input validation vulnerability in pfSense CE and pfSense Plus pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01 allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command...

8.8CVSS7.3AI score0.01932EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/03/29 12:00 a.m.28 views

D-Link Dir-820L Remote Command Execution Vulnerability

D-Link Dir-820L is a dual-band wireless router from China's Youxun D-Link.D-Link DIR-820L 1.05B03 has a security vulnerability, and no details of the vulnerability are available...

9.8CVSS3.4AI score0.80377EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/28 12:15 a.m.5 views

CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...

9.8CVSS7.7AI score0.80377EPSS
SaveExploits1References6
Packet Storm
Packet Storm
added 2022/03/28 12:00 a.m.203 views

Backdoor.Win32.Chubo.c Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/c16b04a9879896ef453a6deb13528087.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Chubo.c Vulnerability: Unauthenticated Remote Command Execution Family: Chubo Type:...

SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/28 12:00 a.m.75 views

CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

9.8CVSS2.8AI score0.80377EPSS
SaveIn wildExploits1References6
Packet Storm
Packet Storm
added 2022/03/28 12:00 a.m.416 views

Backdoor.Win32.Avstral.e Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/35f0d754f161af35241cb081c73ea6dd.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Avstral.e Vulnerability: Unauthenticated Remote Command Execution Family: Avstral Typ...

SaveExploits0
GitLab Advisory Database
GitLab Advisory Database
added 2022/03/28 12:00 a.m.59 views

Unrestricted Upload of File with Dangerous Type

Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6...

9.9CVSS2.3AI score0.65237EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder