CA Release Automation NiMi 6.5 Remote Command Execution

Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Date: 2016-06-23 Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release...

CA Release Automation NiMi 6.5 - Remote Command Execution Exploit

Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release Automation NiMi 5.X,...

CVE-2018-17139

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type...

CVE-2018-17139

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type...

Command injection

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type...

CVE-2018-17139

CVE-2018-17139 affects UltimatePOS 2.5. An arbitrary file upload vulnerability allows an attacker to upload files via the /products endpoint (content-type: image/jpeg) containing PHP code, enabling remote command execution. Evidence across CNVD-2018-19402 and NVD/NVD-derived entries confirms the ...

CVE-2018-17139

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type...

CA Release Automation NiMi 6.5 - Remote Command Execution

Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Date: 2016-06-23 Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link: https://docops.ca.com/ca-release-automation/5-5-2/en/installation/deploy-agents/ Version: CA Release...

Xiaomi Router 4Q suffers from command execution vulnerability

The Xiaomi Router 4Q is a router. A command execution vulnerability exists in Xiaomi Router 4Q. An attacker can exploit the vulnerability to remotely execute arbitrary code...

CA Release Automation NiMi 6.5 - Remote Command Execution

CA Release Automation NiMi 6.5 - Remote Command Execution Exploit Title: CA Release Automation NiMi 6.5 - Remote Command Execution Date: 2016-06-23 Exploit Authors: Jakub Palaczynski, Maciej Grabiec Vendor Homepage: http://www.ca.com/ Software Link:...

Micronet INplc-RT Authorization Issue Vulnerability (CNVD-2019-40825)

Micronet INplc-RT is a software-defined PLC Programmable Logic Controller from Micronet Japan. An authorization issue vulnerability exists in Micronet INplc-RT version 3.08 and earlier. A remote attacker could exploit this vulnerability to execute arbitrary commands...

FreeBSD : Plex Media Server -- Information Disclosure Vulnerability (337960ec-b5dc-11e8-ac58-a4badb2f4699)

Chris reports : The XML parsing engine for Plex Media Server's SSDP/UPNP functionality is vulnerable to an XML External Entity Processing XXE attack. Unauthenticated attackers on the same LAN can use this vulnerability to : - Access arbitrary files from the filesystem with the same permission as...

Micronet INplc-RT License Issue Vulnerability

Micronet INplc-RT is a software-defined PLC Programmable Logic Controller from Micronet Japan. An authorization issue vulnerability exists in Micronet INplc-RT version 3.08 and earlier. A remote attacker could exploit this vulnerability to execute arbitrary commands...

CVE-2018-1571

IBM QRadar SIEM is affected by CVE-2018-1571. A remote authenticated attacker could execute arbitrary commands by sending a specially crafted request, due to OS command injection where user-supplied data reaches the system shell. Affected: QRadar SIEM 7.2.x up to 7.2.8 Patch 13 (and interim fixes...

CVE-2018-1571

IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 143121...

Apache Struts 2.x < 2.3.1.2 RCE (S2-009)

The version of Apache Struts running on the remote host is 2.x prior to 2.3.1.2. It, therefore, is affected a possible remote command execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

RPi Cam Control < 6.4.25 - Remote Command Execution Exploit

Exploit for linux platform in category web applications !/usr/bin/python import sys import requests import os import re import readline def usage: print "\nRPi Cam Web Interface Exploit\n" print "Usage: %s http://host/path/to/preview.php \n" % sys.argv0 print "Options: " print " -h, --help Show...

LG Network Storage N1A1DD1 imgcopy.php has a remote command execution vulnerability

The LG Network Storage N1A1DD1 is a networked storage product NAS. The LG Network Storage N1A1DD1 imgcopy.php suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and take control of the device...

Apache Struts 2.x < 2.3.14.2 Multiple Vulnerabilities (S2-014)

The version of Apache Struts running on the remote host is 2.x prior to 2.3.14.2. It, therefore, is affected by multiple vulnerabilities including a remote command execution vulnerability and a cross-site scripting XSS vulnerability. Note that Nessus has not tested for these issues but has instea...

LG Network Storage N1A1DD1 task_burning.php has a remote command execution vulnerability

The LG Network Storage N1A1DD1 is a networked storage product NAS. The LG Network Storage N1A1DD1 taskburning.php suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and take control of the device...