CVE-2019-19469

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

CVE-2019-19469

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

CVE-2019-19469: Improper Neutralization of Special Elements used in an OS Command

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

Crestron Electronics DMC-STRO Operating System Command Injection Vulnerability

The Crestron Electronics DMC-STRO is a streaming input card for receiving streaming video signals from Crestron Electronics, USA. The Crestron Electronics DMC-STRO suffers from an operating system command injection vulnerability. The vulnerability can be exploited by an attacker to execute comman...

Code injection

The DHCPv6 client dhcp6c as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

CVE-2011-2717

The DHCPv6 client dhcp6c as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

CVE-2019-18184

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...

CVE-2019-18184

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...

PT-2019-6649

Name of the Vulnerable Software and Affected Versions dhcpv6 project through 2011-07-25 Description The issue allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message. This is a result of the DHCPv6 client dhcp6c not properly...

PT-2019-15260

Name of the Vulnerable Software and Affected Versions Crestron DMC-STRO version 1.0 Description The issue allows remote command execution as root via shell metacharacters to the ping function. Recommendations For Crestron DMC-STRO version 1.0, consider restricting access to the ping function to...

CVE-2019-18184: Improper Neutralization of Special Elements used in an OS Command

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...

CVE-2011-2717: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The DHCPv6 client dhcp6c as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message...

CVE-2019-19117

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2PSG1218 V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter...

Command injection

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2PSG1218 V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter...

CVE-2019-19117

CVE-2019-19117 affects PHICOMM K2 (PSG1218) with V22.5.9.163. The flaw is in /usr/lib/lua/luci/controller/admin/autoupgrade.lua, where remote authenticated users can execute arbitrary commands via shell metacharacters in the cgi-bin/luci autoUpTime parameter. CVSS v3.1 base score 8.8 (HIGH) with ...

CVE-2019-19117: Improper Neutralization of Special Elements used in an OS Command

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2PSG1218 V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter...

Intellian Technologies Remote Access Operating System Command Injection Vulnerability

Intellian Technologies Remote Access is an application for remote management of Intellian Satellite Terminal products from Intellian Technologies in Korea. An operating system command injection vulnerability exists in Intellian Technologies Remote Access. The vulnerability can be exploited to...

CVE-2019-17510

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...

CVE-2019-17509

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php...

CVE-2019-17510

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...