Apache Continuum Arbitrary Command Execution

A remote command injection vulnerability exists in Apache HTTP servers. By exploiting this vulnerability, a remote attacker can execute arbitrary code on the affected server...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:1301-1) (ImageTragick)

This update for ImageMagick fixes the following issues : - bsc978061: A vulnerability in ImageMagick's 'https' module allowed users to execute arbitrary shell commands on the host performing the image conversion. The issue had the potential for remote command injection. This update mitigates the...

SUSE-SU-2016:1301-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - bsc978061: A vulnerability in ImageMagick's 'https' module allowed users to execute arbitrary shell commands on the host performing the image conversion. The issue had the potential for remote command injection. This update mitigates the...

Joyent Node.js mustache command injection vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js mustachec allows remote attackers to submit special requests for command injection due to the lack of quotes in program properties...

Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)

Cisco UCS Manager 2.11b - Remote Command Injection Shellshock !/usr/bin/python Cisco UCS Manager 2.11b Shellshock Exploit CVE-2014-6278 Confirmed on version 2.11b, but more are likely vulnerable. Cisco's advisory:...

Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)

!/usr/bin/python Cisco UCS Manager 2.11b Shellshock Exploit CVE-2014-6278 Confirmed on version 2.11b, but more are likely vulnerable. Cisco's advisory: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash Exploit generates a reverse shell to a nc listener...

Cisco ACE 4710 Device Manager GUI Remote Command Injection Vulnerability (cisco-sa-20160224-ace)

The Cisco Application Control Engine ACE software installed on the remote Cisco ACE 4710 device is an A5 version prior to A53.0. It is, therefore, affected by a remote command injection vulnerability in the device manager GUI due to improper validation of user-supplied input in HTTP POST requests...

D-Link DSL-2750B OS Command Injection

This module exploits a remote command injection vulnerability in D-Link DSL-2750B devices. Vulnerability can be exploited through "cli" parameter that is directly used to invoke "ayecli" binary. Vulnerable firmwares are from 1.01 up to 1.03. Module Options msf use...

D-Link DIR-601 Command Injection Vulnerability

D-Link DIR-601 is a wireless router product from AUO. A command injection vulnerability exists in the D-Link DIR-601, which allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary OS commands...

b374k 3.2.3 2.8 CSRF / Command Injection Vulnerabilities

b374k web shell versions 2.8 and 3.2.3 suffer from a cross site request forgery vulnerability that allows for remote command injection. Vendor: ============================================ github.com/b374k/b374k code.google.com/p/b374k-shell/downloads/list code.google.com/archive/p/b374k-shell/...

Huawei FusionServer Product Command Injection Vulnerability

Huawei FusionServer RH2288 V3 is a server product from Huawei, China. A security vulnerability exists in the Huawei FusionServer product that allows remote attackers to submit a special request to change parameters in the login page and inject commands...

Unauthenticated Remote Command Injection

Overview epimageconvert is a plugin for Etherpad Lite. epimageconvert = 0.0.2 is vulnerable to remote command injection. Authentication is not required for remote exploitation. Recommendation Update to version 0.0.3 or greater. References - PR 5 - GitHub Advisory...

Hacking ipcam like Harold in POI-vulnerability warning-the black bar safety net

0x00 for ipcam attack mesh and preparation 0x01 for embedded devices parameter injection vulnerability to conventional weapons and methods of analysis 0x02 several wonderful case 0x03 Hacking like POI 0x00 preparation This time we discussed is the analysis of the smart camera firmware,through a...

Cisco TelePresence Video Communication Server Expressway Remote Command Injection Vulnerability

Cisco TelePresence Video Communication Server VCS Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A...

D-Link DIR-636L Remote Command Injection and Authentication Bypass (CVE-2015-1187)

Remote command injection and authentication bypass vulnerabilities exist in D-Link routers. The vulnerabilities are due to incorrectly filtering input on the 'ping' and 'fwupgrade' tools which allows to inject arbitrary commands into the router and file upload without authentication. A remote...

Ferrari Online Service - (PHP) Remote Commend Injection

Document Title: =============== Ferrari Online Service - PHP Remote Commend Injection References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1561 View Video: https://www.youtube.com/watch?v=0m-gYRoBpoI Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID:...

Ferrari Online Service - (PHP) Remote Commend Injection

Document Title: =============== Ferrari Online Service - PHP Remote Commend Injection References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1561 View Video: https://www.youtube.com/watch?v=0m-gYRoBpoI Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID:...

PT-2022-3252 · Python +11 · Python +11

Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.10.8 Python versions 3.7, 3.8, 3.9 Description: The issue is related to insufficient argument validation in the mailcap module of the Python interpreter. This may allow a remote attacker to inject shell commands int...

Igreks MilkyStep OS Command Injection Vulnerability

Igreks MilkyStep is a CGI for pushing magazines through the email system. A security vulnerability exists in Igreks MilkyStep that allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary OS commands...

Symantec Encryption Gateway Remote Command Injection

!/usr/bin/perl -w use LWP::UserAgent; Vantage Point Security Advisory 2014-007 Title: Symantec Encryption Management Server - Remote Command Injection Exploit CVE: CVE-2014-7288 Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: \n"; printf "\t$0...