CVE-2019-16701

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.execphp call containing shell metacharacters in a parameter value...

CVE-2019-16701: Improper Neutralization of Special Elements used in an OS Command

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.execphp call containing shell metacharacters in a parameter value...

PT-2019-14777

Name of the Vulnerable Software and Affected Versions pfSense versions 2.3.4 through 2.4.4-p3 Description The issue allows for remote code injection via a methodCall XML document. This is achieved by using a pfsense.exec php call that contains shell metacharacters in a parameter value, such as...

CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

Remote code execution

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

CVE-2016-10960

CVE-2016-10960 affects the WordPress WordPress wSecure Lite plugin prior to version 2.4. The vulnerability arises from remote code execution via shell metacharacters in the wsecure-config.php publish parameter, enabling an attacker to run arbitrary code on the affected site. Multiple connected so...

CVE-2016-10960

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

CVE-2016-10960: Improper Input Validation

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter...

PT-2019-7753

Name of the Vulnerable Software and Affected Versions wsecure plugin versions prior to 2.4 Description The issue allows for remote code execution via shell metacharacters in the publish parameter of the wsecure-config.php file. Recommendations For versions prior to 2.4, update to version 2.4 or...

PT-2019-5738

Name of the Vulnerable Software and Affected Versions GateOne affected versions not specified Description The issue is related to insufficient input validation in the terminal emulator and SSH client, GateOne. This allows remote attackers to execute arbitrary commands via shell metacharacters in...

CVE-2019-15528

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Interface field to SetStaticRouteSettings...

CVE-2019-15529

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Username field to Login...

CVE-2019-15527

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MaxIdTime field to SetWanSettings...

CVE-2019-15530

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the LoginPassword field to Login...

Command injection

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MaxIdTime field to SetWanSettings...

Command injection

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the LoginPassword field to Login...

Command injection

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Interface field to SetStaticRouteSettings...

Command injection

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Username field to Login...

CVE-2019-15526

The CVE-2019-15526 entry concerns D-Link DIR-823G devices with firmware V1.0.2B05. The issue is a command injection in HNAP1 via shell metacharacters in the Type field to SetWanSettings, exploitable with authentication. This is tied to CVE-2019-13482 as a related issue. External documents in the ...