CVE-2021-35963

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers to upload files containing malicious script to execute RCE attacks...

Moodle SQL注入漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an SQL injection vulnerability that stems from insufficient processing of user-supplied data in the library that...

Insteon HD IP Camera Remote Code Execution (CVE-2018-11560; CVE-2018-12640)

A remote code execution vulnerability exists in Insteon HD IP Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

fail2ban 代码注入漏洞

fail2ban is a software application. Disable causes multiple hosts with authentication errors. fail2ban suffers from a code injection vulnerability that could lead to remote code execution. To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent b...

CVE-2021-3043

A reflected cross-site scripting XSS vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface. Prisma Cloud Compute SaaS versio...

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

...

PT-2021-4150 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Snap-in component, specifically affecting the dnsmgmt.msc module. This allows remote attackers to execute...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50185)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that arises from the web interface of the product's ClearPass feature failing to...

Backdoor.Win32.NerTe.a Unauthenticated Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/125364b0cdae80c10f00b75c8e2cfa47B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NerTe.a Vulnerability: Unauthenticated Remote Command Execution Description: The...

CVE-2021-27037

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code...

Kaseya VSA RMM 代码问题漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. A security vulnerability exists in Kaseya VSA versions prior to 9.5.5, which can be exploited by an attacker to remote...

CVE-2021-34616

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34615

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34612

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34615

The CVE-2021-34615 issue affects Aruba ClearPass Policy Manager and is a remote arbitrary command execution vulnerability. Affected versions are prior to 6.10.0, 6.9.6, and 6.8.9. Multiple sources describe that the vulnerability stems from input data not being properly validated, enabling an atta...

CVE-2021-34613

Aruba ClearPass Policy Manager is affected by a remote command injection/arbitrary code execution vulnerability (CVE-2021-34613) in versions prior to 6.10.0, 6.9.6, and 6.8.9. The issue arises from processing unvalidated user input, enabling an attacker to execute system commands. Aruba released ...

CVE-2021-34612

CVE-2021-34612 relates to Aruba ClearPass Policy Manager, where a remote arbitrary command execution was identified due to improper processing of input data in the web interface. Affected versions are prior to 6.10.0, 6.9.6 and 6.8.9. The issue is described as a command-injection vulnerability th...

CVE-2021-34614

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...