CVE-2021-37102: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful...

Efm Networks IpTime C200 Camera security vulnerability

The Efm Networks IpTime C200 Camera is a webcam from the Korean company Efm Networks. The Efm Networks IpTime C200 Camera suffers from a security vulnerability that allows a remote attacker to send crafted parameters to an exposed web service interface that can invoke arbitrary shell commands...

Backdoor.Win32.Antilam.11 Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/290477c9707f64a316888493ae67b1ef.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Antilam.11 Vulnerability: Unauthenticated Remote Command Execution Description: The...

PT-2021-8063

Name of the Vulnerable Software and Affected Versions Siemens LOGO affected versions not specified Description The issue is related to a lack of authentication for a critical function in the embedded software of Siemens LOGO programmable logic controllers. This could allow a remote attacker to...

IBM Data Risk Manager Arbitrary Command Execution

The vulnerability of the IBM Data Risk Manager application for identifying, analyzing, and visualizing business risks is related to the failure to take measures to neutralize specific elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

NETGEAR R6020 Arbitrary Shell Command Execution

The vulnerability of the Wi-Fi router software of NETGEAR R6020 is related to the lack of measures to clean incoming data containing metasymbols. Exploiting this vulnerability can allow a remote attacker to execute arbitrary shell commands...

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

Sql injection

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

CVE-2021-42580

CVE-2021-42580 affects Sourcecodester Online Learning System 2.0. The vulnerability consists of a SQL injection-based authentication bypass in the admin/login.php and an authenticated file upload issue in Master.php, which together can be exploited to achieve unauthenticated remote code execution...

PT-2021-23640 · Unknown · Sourcecodester Online Learning System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Learning System version 2.0 Description: The issue concerns SQL injection authentication bypass in the admin login file /admin/login.php and authenticated file upload in the Master.php file. These vulnerabilities can be...

Hikvision embedded web-server arbitrary command execution

The vulnerability of Hikvision’s embedded web-server-based IP camera software relates to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

CVE-2021-34417 Authenticated remote command execution with root privileges via web console in MMR

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Recording Connector before version 3.8.45.20210703, Zoom On-Premise Virtual Room...

Exploit for Code Injection in Gitlab

CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This...

VulnCheck KEV: CVE-2020-8958

Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field...

CVE-2021-42237

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability...

CVE-2021-42237

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability...

Deserialization of untrusted data

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability...

CVE-2021-42237

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability...