Lucene search
+L

7603 matches found

Positive Technologies
Positive Technologies
•added 2024/08/17 12:00 a.m.•19 views

PT-2024-41068 · Мир Кт-51 +1 · Мир Кт-51 +1

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 and МИР контроллеры affected versions not specified Description: The issue is related to the implementation of the Telnet protocol in the МИР КТ-51 controller and the МИР controller configurator, which involves the transmission of...

9.4CVSS6.8AI score
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•15 views

Tenda FH1201 Command Execution Vulnerability

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a command execution vulnerability that stems from a problem with the handler function in /goform/telnet, which can be exploited by an attacker to execute arbitrary commands via specially crafted HTTP requests...

9.8CVSS8.1AI score0.0098EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/08/15 5:15 p.m.•17 views

CVE-2024-42978

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS6.1AI score0.0123EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/08/15 5:15 p.m.•18 views

CVE-2024-42947

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 408 allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS6.1AI score0.0098EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/15 12:00 a.m.•17 views

Tenda FH1206 security vulnerabilities

Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a command execution vulnerability that originates from an arbitrary command execution vulnerability contained in the handler parameter of the /goform/telnet file, whic...

9.8CVSS7.9AI score0.0123EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/08/15 12:00 a.m.•19 views

PT-2024-30218 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: An issue in the handler function in "/goform/telnet" allows attackers to execute arbitrary commands via a crafted HTTP request. Recommendations: For Tenda FH1201 version 1.2.0.14, as a temporary...

9.8CVSS7.5AI score0.0098EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/15 12:00 a.m.•4 views

CVE-2024-42947: Improper Neutralization of Special Elements used in a Command

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 408 allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS6.4AI score0.0098EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/15 12:00 a.m.•29 views

Tenda FH1201 security vulnerabilities

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a command execution vulnerability that stems from a problem with the handler function in /goform/telnet, which can be exploited by an attacker to execute arbitrary commands via specially crafted HTTP requests...

9.8CVSS8AI score0.0098EPSS
SaveExploits1References2
CNVD
CNVD
•added 2024/08/13 12:00 a.m.•16 views

D-Link DAP-2622 Command Injection Remote Code Execution Vulnerability

The D-Link DAP-2622 is a wireless access point AP from D-Link designed for wireless network coverage in an enterprise or commercial environment. The D-Link DAP-2622 suffers from a Command Injection Remote Code Execution vulnerability that stems from a Telnet CLI Command Injection Remote Code...

6.8CVSS8.2AI score0.01267EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/12 1:38 p.m.•41 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS0.01369EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2024/08/12 1:38 p.m.•20 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS7.4AI score0.01369EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2024/08/12 1:38 p.m.•15 views

UBUNTU-CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS6.2AI score0.01369EPSS
SaveExploits0References3
CVE
CVE
•added 2024/08/12 5:46 a.m.•105 views

CVE-2024-5651

CVE-2024-5651 affects the Fence Agents Remediation Operator. A flaw in handling --ssh-path/--telnet-path arguments enables Remote Code Execution, allowing a low-privilege user to craft a FenceAgentsRemediation that executes arbitrary commands on the operator pod, escalating from the operator’s se...

8.8CVSS9.2AI score0.01369EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/08/12 5:46 a.m.•290 views

CVE-2024-5651 Fence-agents-remediation: fence agent command line options leads to remote code execution

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS0.01369EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/08/12 5:46 a.m.•59 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS8.5AI score0.01369EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/12 5:46 a.m.•19 views

CVE-2024-5651 Fence-agents-remediation: fence agent command line options leads to remote code execution

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS9.2AI score0.01369EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/08/12 5:46 a.m.•20 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS9.2AI score0.01369EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•5 views

CVE-2024-5651: Improper Control of Generation of Code

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS8.1AI score0.01369EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/11 12:00 a.m.•33 views

PT-2024-36825 · Unknown · Fence Agents Remediation Operator

Name of the Vulnerable Software and Affected Versions: Fence Agents Remediation operator affected versions not specified Description: A flaw was found in the Fence Agents Remediation operator, allowing a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the...

8.8CVSS8.1AI score0.01369EPSS
SaveExploits0References19
GithubExploit
GithubExploit
•added 2024/08/09 7:32 p.m.•85 views

Exploit for Incorrect Authorization in Nexxtsolutions Nebula1200-Ac_Firmware

EN This project provides a proof-of-concept exploit for a remo...

9.8CVSS9.1AI score0.02556EPSS
SaveExploits2
Rows per page
Query Builder