CVE-2018-14494

CVE-2018-14494 concerns Vivotek FD8136 devices and is described as a Remote Command Injection in evidence related to BusyBox and wget. The connected Red Hat and other entries reiterate this as a vulnerability affecting the FD8136, but the Red Hat notes also classify it as historical and not appli...

PT-2019-9030 · Vivotek +2 · Vivotek Fd8136 +2

Name of the Vulnerable Software and Affected Versions: Vivotek FD8136 affected versions not specified Description: The issue allows for Remote Command Injection, related to BusyBox and wget. It is a historical vulnerability that does not apply to any current or recent Vivotek hardware or firmware...

PT-2019-9031 · Vivotek · Vivotek Fd8136

Name of the Vulnerable Software and Affected Versions: Vivotek FD8136 devices affected versions not specified Description: The issue allows for Remote Command Injection. It is noted that this is a different issue from other known vulnerabilities. The vendor has disputed this as a vulnerability,...

FaceSentry Access Control System 6.4.8 - Remote Command Injection Vulnerability

Exploit for hardware platform in category web applications FaceSentry Access Control System 6.4.8 Remote Command Injection Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7.2 build 568 Algorithm A14 Firmware 5.7.0 build...

FaceSentry Access Control System 6.4.8 Remote Command Injection

FaceSentry Access Control System 6.4.8 Remote Command Injection Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7.2 build 568 Algorithm A14 Firmware 5.7.0 build 539 Algorithm A14 Summary: FaceSentry 5AN is a revolutionar...

FaceSentry Access Control System 6.4.8 Remote Command Injection

Summary FaceSentry 5AN is a revolutionary smart identity management appliance that offers entry via biometric face identification, contactless smart card, staff ID, or QR-code. The QR-code upgrade allows you to share an eKey with guests while you're away from your Office and monitor all activity...

Cisco Integrated Management Controller Operating System Command Injection Vulnerability (CNVD-2019-18899)

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. An operati...

Exim MTA Vulnerability (The Return of the WIZard – CVE-2019-10149)

Last week, Qualys issued a security advisory for a vulnerability we discovered during a code review of Exim. This vulnerability can lead to Remote Command Injection, and is currently being actively attacked in the wild. This blog will show you how to quickly identify assets that are impacted by...

HPE Intelligent Management Center (IMC) Remote Command Injection Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A remote command injection vulnerability exists in HPE Intelligent Management Center IMC 7.3 E0506P09 and...

CVE-2019-5390

A remote command injection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5390

A remote command injection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5390

CVE-2019-5390 is a remote command injection vulnerability in HPE Intelligent Management Center (IMC) PLAT prior to version 7.3 E0506P09. The issue affects the iMC/dbman components and allows an unauthenticated, network‑based attacker to execute arbitrary commands on the remote host. Impact is des...

CVE-2019-5390

A remote command injection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

Command injection

An issue was discovered in upgradefirmware.cgi on VStarcam 100T C7824WIP CH-sys-48.53.75.119123 and 200V C38S CH-sys-48.53.203.119123 devices. A remote command can be executed through a system firmware update without authentication. The attacker can modify the files within the internal firmware o...

CVE-2019-11224

HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection...

CVE-2019-11224

HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection...

HARMAN AMX MVP5150 Command Execution Vulnerability

The Harman AMX MVP5150 is an audio and video system device. A command injection vulnerability exists in the Harman AMX MVP5150 v2.87.13 device, which allows an attacker to perform remote operating system command injection...

Barco / AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Exploit Author: Jacob Baines Tested on: Crestron AM-100 1.6.0.2 CVE : CVE-2019-3929 PoC Video: https://www.youtube.com/watch?v=q-PIjnPcu2k...

Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection

Exploit Title: Barco/AWIND OEM Presentation Platform Unauthenticated Remote Command Injection Date: 05/01/2019 Exploit Author: Jacob Baines Tested on: Crestron AM-100 1.6.0.2 CVE : CVE-2019-3929 PoC Video: https://www.youtube.com/watch?v=q-PIjnPcu2k Advisory:...

Critical Flaws Found in Eight Wireless Presentation Systems

Multiple wireless presentation systems have critical vulnerabilities – including a remote command-injection glitch and an unauthenticated remote stack buffer overflow flaw. Wireless presentation systems allow users to display their content directly from their laptop no network cable necessary by...