GeoNetwork 操作系统命令注入漏洞

GeoNetwork is GeoNetwork open source a catalog application . It is used to manage spatial reference resources. A security vulnerability exists in GeoNetwork versions prior to 3.12.0 and 4.x series versions prior to 4.0.4, which can be exploited by an attacker to remotely execute arbitrary operati...

Apache OFBiz Code Injection Vulnerability (CNVD-2023-03918)

Apache OFBiz is an enterprise resource planning ERP system from the Apache Foundation. A code injection vulnerability exists in Apache OFBiz 18.12.05 and earlier versions, which stems from an error in Birt and can be exploited by attackers to remotely execute code...

The vulnerability of the JMX data management platform of Apache Geode allows an attacker to execute arbitrary code.

The vulnerability of the JMX data management platform of Apache Geode involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the IAM and SSO Casdoor platform lies in its ability to download files of a malicious nature without limitation. This allows a hacker to download and execute any file on the target system.

The vulnerability of the IAM and SSO Casdoor platform lies in its ability to allow unlimited loading of malicious files. Exploiting this vulnerability could enable a malicious actor, operating remotely, to load and execute any file on the target system...

InnoSilicon T3T+ 安全漏洞

The InnoSilicon T3T+ is a bitcoin miner from InnoSilicon. A security vulnerability exists in the InnoSilicon T3T+ t2t+soc20190911151433.swu version, which stems from the discovery of a Remote Code Execution RCE vulnerability contained via the checkUrl function...

Palo Alto Networks Multiple Products Command Injection (CVE-2021-3060)

A command injection vulnerability exists in multiple Palo Alto Networks products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

The vulnerability in the iTop web-based IT service management tool arises from improper code generation, allowing an attacker to execute arbitrary code.

The vulnerability of the iTop IT service management web tool is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the open-source e-commerce web application PrestaShop relates to the lack of measures taken to protect the SQL query structure, allowing an attacker to execute arbitrary code.

The vulnerability in the open-source e-commerce web application PrestaShop relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the KDDI Home Spot Cube2 router’s microprogramming software lies in the lack of measures to neutralize the special elements used in the operating system’s command set, allowing attackers to execute arbitrary operating system commands.

The vulnerability of the microprogrammed software of the KDDI Home Spot Cube2 relates to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands of the operating syste...

The vulnerability of the /librarian/studentdetails.php component of the Library Management System allows a malicious individual to execute arbitrary SQL queries.

The vulnerability of the /librarian/studentdetails.php component of the Library Management System lies in the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

U.S. Dept Of Defense: Reflected XSS at https://██████/

A reflected XSS vulnerability was discovered in the logout functionality of ServiceNow, allowing an unauthenticated remote attacker to execute arbitrary JavaScript code...

Ubuntu: Security Advisory (USN-37-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-840-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-43329

A SQL injection vulnerability in licenseupdate.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute arbitrary SQL commands via the license parameter...

The vulnerability of the microprogrammed software of the digital video recorders UNIMO models UDR-JA1004, JA1008, and JA1016 lies in the absence of authentication for a critical function, allowing attackers to execute arbitrary OS commands.

The vulnerability of the microprogrammed software of the UNIMO digital video recorders models UDR-JA1004, JA1008, and JA1016 is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary OS...

PT-2022-4452 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions 10.2.1.5-34sv and earlier Description: The issue is caused by a heap-based buffer overflow in the dynamic memory of SonicWall SMA100 appliances. This can be exploited by a remote attacker to potentially execute...

CVE-2022-35733

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier allows a remote unauthenticated attacker to execute an arbitrary OS...

Measuresoft ScadaPro Server ORM File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

GitLab CE/EE Remote Command Execution Vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features.GitLab CE/EE has a security vulnerability that could be exploited by an attacke...

FLIR AX8 1.46.16 Remote Command Execution Exploit

-- coding: utf-8 -- Exploit Title: FLIR AX8 Unauthenticated OS Command Injection Exploit Author: Samy Younsi Naqwada https://samy.link Vendor Homepage: https://www.flir.com/ Software Link: https://www.flir.com/products/ax8-automation/ PoC: https://www.youtube.com/watch?v=dh0rfAIWok Version: 1.46....