CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-32766

CVE-2024-32766 is an OS command injection affecting QNAP QTS (5.1.3.2578+), QTS (4.5.4.2627+), QuTS hero (h5.1.3.2578+, h4.5.4.2626+), and QuTScloud (c5.1.5.2651+). Root cause: insufficient input sanitization allowing network-executed commands. Affected versions are listed; fixes are provided in ...

D-Link DIR-822 安全漏洞

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the ChgSambaUserSettings function of prog.cgi, allowing remote attackers to execute arbitrary commands...

PT-2024-24551

Name of the Vulnerable Software and Affected Versions inducer relate versions prior to 2024.1 Description A Server-Side Template Injection SSTI issue allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function. This enables the attacker to...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : Honeywell Equipment : Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Vulnerabilities : Exposed Dangerous Method or Function, Absolute Path Traversal,...

ChangeDetection.io 安全漏洞

changedetection.io is a website change detection, monitoring and notification application by dgtlmoon individual developer. A security vulnerability exists in ChangeDetection.io versions prior to 21.045 that stems from server-side template injection using an insecure feature of Jinja2 that allows...

The vulnerability of the OLE DB driver for SQL Server, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the `open_get_offered_capabilities()` function in the C language library for interacting with Azure uAMQP allows a attacker to execute arbitrary code.

The vulnerability of the opengetofferedcapabilities function in the C language library for interacting with Azure uAMQP services is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2024-3191 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.5 Description: The issue is related to a command injection in the SetPlcNetworkpwd function of the prog.cgi script, which allows remote attackers to execute arbitrary commands via shell. This is due to the lack of...

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to buffer overflow in the queue. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-28717

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...

PT-2024-3890

Name of the Vulnerable Software and Affected Versions: SOPlanning Simple Online Planning versions affected versions not specified Description: The issue is related to a lack of protection against SQL query structure exploitation in the projets.php script of the SOPlanning CMS system. This could...

The vulnerability of the MessagePack NodeJS/JavaScript msgpackr implementation allows a hacker to cause a service failure.

The vulnerability of the MessagePack NodeJS/JavaScript msgpackr implementation lies in the ability for users to execute suspended threads, creating messages that lock the decoder. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2024-27976

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...

CVE-2024-27976

CVE-2024-27976 describes a path traversal vulnerability in the Ivanti Avalanche web component prior to version 6.4.3 . An authenticated remote attacker can abuse the vulnerable web component to execute arbitrary commands as the SYSTEM user. The issue is addressed by upgrading to Ivanti Avalanche ...

CVE-2024-23534

CVE-2024-23534 affects Ivanti Avalanche prior to 6.4.3. The vulnerability is an Unrestricted File-upload in the web component, tied to the getMasterAdhocCollectionsPath method, enabling a remote authenticated attacker to execute arbitrary commands as SYSTEM. Connected sources confirm the issue re...

CVE-2024-24992

Ivanti Avalanche pre-6.4.3 has a Path Traversal in the web component that allows an authenticated remote attacker to execute arbitrary commands as SYSTEM. Root cause stated in connected sources as improper validation of a user-supplied path (notably via getAdhocFilePath) leading to traversal into...

CVE-2024-24993

A Race Condition TOCTOU vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...

CVE-2024-27976

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...

WordPress Background Image Cropper 1.2 Shell Upload

Exploit Title: Wordpress Plugin Background Image Cropper v1.2 - Remote Code Execution Date: 2024-04-16 Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor Homepage: https://wordpress.org Software Link:...