CVE-2021-28453

Microsoft Word Remote Code Execution Vulnerability...

CVE-2021-28350

Windows GDI+ Remote Code Execution Vulnerability...

Remote code execution

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability...

CVE-2021-28473

Visual Studio Code Remote Code Execution Vulnerability...

GHSA-PH32-23P8-9RW5 Improper Input Validation in network-manager

network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync" argument...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

...

Eaton Intelligent Power Manager 代码注入漏洞

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An Eval injection vulnerability exists in Eaton IPM versions prior to 1.69. The vulnerability arises becaus...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code, which can be exploited by an attacker to remotely execute code...

PT-2021-2685 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to errors in code generation management in Microsoft Word, allowing remote attackers to execute arbitrary code. This can be exploited to gain unauthorized access...

Microsoft Windows Remote Procedure Call Runtime 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A remote code execution vulnerability exists in the "Remote Procedure Call Runtime" in Microsoft Windows an...

Siemens Web Server of SCALANCE X200 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Web Server of SCALANCE X200 Vulnerabilities : Heap-based Buffer Overflow, Stack-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...

Code injection

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These...

ASUS BMC Firmware OS Command Injection Vulnerability (CNVD-2021-36013)

ASUS BMC Firmware is a firmware from Asus China. An operating system command injection vulnerability exists in the ASUS BMC Firmware Web management page, which can be exploited by a remote attacker to initiate command injection and execute arbitrary commands after obtaining administrator privileg...

VulnCheck KEV: CVE-2017-11610

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups...

CVE-2021-28204

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary...

The vulnerability of the configuration management system and remote execution of operations, related to the lack of measures to neutralize special elements, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cau...

SaltStack Salt API Unauthenticated Remote Command Execution Exploit

This Metasploit module leverages an authentication bypass and directory traversal vulnerabilities in Saltstack Salt's REST API to execute commands remotely on the master as the root user. Every 60 seconds, salt-master service performs a maintenance process check that reloads and executes all the...