1931 matches found
CVE-2021-31356
A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability allows an...
Design/Logic Flaw
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...
CVE-2020-21654
Affected software: emlog v6.0. Vulnerability: A flaw in the admin\template.php component allows an attacker to obtain a shell by crafting a malicious ZIP file. This is linked to improper validation of uploaded ZIPs. Impact: Remote code execution with high severity potential due to arbitrary shell...
CVE-2021-25473
Assuming a shell privilege is gained, an improper exception handling for multisimbarhidebymeadiafull value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
Emlog 安全漏洞
Emlog is a PHP and MySQL based CMS builder by the individual developers of Emlog. A security vulnerability exists in Emlog, which is caused by a failure of the product's admin emplate.php to adequately validate user uploaded zip files. The vulnerability can be exploited to obtain a shell, the...
CVE-2020-20672
An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file...
Backdoor.Win32.Wollf.h Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/d0fd60516d53b2ad602c460351dbaa85.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.h Vulnerability: Unauthenticated Remote Command Execution Description: The...
Backdoor.Win32.WinterLove.i Hardcoded Credential
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/c6c81e8ba0a7b9da6216a78dfeccec8d.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.WinterLove.i Vulnerability: Hardcoded Weak Password Description: The WinterLove malwa...
CVE-2021-34722 Cisco IOS XR Software Command Injection Vulnerabilities
Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details sectio...
CVE-2021-34721
Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details sectio...
CVE-2020-18121
A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...
Indexhibit 权限许可和访问控制问题漏洞
Indexhibit is a web-based content management system. indexhibit version 2.1.5 contains a misconfiguration vulnerability. An attacker could use this vulnerability to modify the .php file so that it can get a getshell...
PT-2021-10132
Name of the Vulnerable Software and Affected Versions: Indexhibit version 2.1.5 Description: A configuration issue allows authenticated attackers to modify .php files, leading to potential shell access. Recommendations: For Indexhibit version 2.1.5, consider restricting file modification...
CVE-2021-3459
A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary privileged commands to be executed on the adapter...
CVE-2021-3459
Technical details (affected software, exact root cause, versions, exploit methods) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.
Motorola MM1000 操作系统命令注入漏洞
The Motorola MM1000 is a network adapter from Motorola USA. A security vulnerability exists in the Motorola MM1000 that could allow privileged shell access and/or arbitrary privileged command execution on the adapter...
PT-2021-20568
Name of the Vulnerable Software and Affected Versions: MM1000 device configuration web server affected versions not specified Description: A privilege escalation issue was reported in the MM1000 device configuration web server. This could allow for privileged shell access and/or the execution of...
CVE-2021-3459: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary privileged commands to be executed on the adapter...
CVE-2021-36622
Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the...
CVE-2021-36622
Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the...