PT-2018-2678 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through 0.9.8.740 Description: The issue is related to insufficient authentication of executed requests in the CentOS Web Panel application, specifically affecting the "admin/index.php?module=rootpwd" endpoint. This...

CentOS Web Panel Root Account Takeover <= v0.9.8.740 Remote Command Execution Exploit

CentOS Web Panel versions 0.9.8.740 and below suffer from cross site request forgery and cross site scripting vulnerabilities that can be leveraged to achieve remote code execution. + Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url =...

PT-2018-2679 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through 0.9.8.740 Description: The issue is related to insufficient authentication of requests, allowing for the execution of arbitrary OS commands. This can be exploited by a remote attacker to execute commands. The...

CentOS Web Panel 0.9.8.740 Root Account Takeover / Command Execution

Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url = "http://targetserver:2030/admin/index.php?module=rootpwd"; var params = "ifpost=yes&password1=newpassword&password2=newpassword"; var vuln = new XMLHttpRequest; vuln.open"POST", url, true; vuln.withCredentials =...

Server side request forgery (ssrf)

Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF...

The vulnerability of the web interface of the microprogramming software for Cisco RV110W Wireless-N VPN and the multifunctional VPN routers Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN allows a hacker to execute arbitrary commands.

The vulnerability of the web interface of Microprogramming Software for Cisco RV110W Wireless-N VPN and Multi-Function VPN Routers such as Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN lies in insufficient cleaning of input data used during command generation. Exploiting this...

CVE-2018-18652

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

CVE-2018-18652

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

Design/Logic Flaw

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

CVE-2018-18652

The CVE-2018-18652 entry concerns Veritas NetBackup Appliance prior to 3.1.2. It describes a remote command execution vulnerability caused by insufficient filtering of user-provided input, permitting authenticated administrators to execute arbitrary commands as root. The connected sources substan...

CVE-2018-18652

A remote command execution vulnerability in Veritas NetBackup Appliance before 3.1.2 allows authenticated administrators to execute arbitrary commands as root. This issue was caused by insufficient filtering of user provided input...

Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)

Oracle Weblogic Server - Deserialization Remote Command Execution Patch Bypass // All respects goes to Zhiyi Zhang of 360 ESG Codesafe Team // URL: https://blogs.projectmoon.pw/2018/10/19/Oracle-WebLogic-Two-RCE-Deserialization-Vulnerabilities/ package ysoserial.payloads; import...

Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)

// All respects goes to Zhiyi Zhang of 360 ESG Codesafe Team // URL: https://blogs.projectmoon.pw/2018/10/19/Oracle-WebLogic-Two-RCE-Deserialization-Vulnerabilities/ package ysoserial.payloads; import com.sun.jndi.rmi.registry.ReferenceWrapperStub; import sun.rmi.server.UnicastRef; import...

PYSEC-2018-30

SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-apinetapi...

salt -- multiple vulnerabilities

SaltStack reports: Remote command execution and incorrect access control when using salt-api. Directory traversal vulnerability when using salt-api. Allows an attacker to determine what files exist on a server when querying /run or /events...

PT-2018-2497 · Medion +3 · Medion Lifecloud Nas +3

Name of the Vulnerable Software and Affected Versions: Seagate GoFlex Home affected versions not specified Medion LifeCloud NAS affected versions not specified Netgear Stora affected versions not specified Description: The issue is related to an incorrect restriction of XML links to external...

Asuswrt-Merlin Merlin.PHP component command execution vulnerability (CNVD-2018-21490)

Asuswrt-Merlin is a firmware from ASUS that runs in its routers.Merlin.PHP is one of the web-based admin panel components. A security vulnerability exists in the Asuswrt-Merlin Merlin.PHP component version 0.6.6. A remote attacker could exploit the vulnerability to execute arbitrary commands...

Asuswrt-Merlin Merlin.PHP Component Command Execution Vulnerability

Asuswrt-Merlin is a firmware from ASUS that runs in its routers.Merlin.PHP is one of the web-based admin panel components. A command execution vulnerability exists in version 0.6.6 of the Asuswrt-Merlin Merlin.PHP component that can be exploited by a remote attacker to execute arbitrary commands...

Exploit for CVE-2018-16509

Python PIL/Pillow Remote Shell Command Execution via Ghostscri...

CVE-2018-18319

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc='ls' URI. NOTE: the vendor indicates that Merlin.PHP is designed on...