Lucene search
+L

6550 matches found

OSV
OSV
added 2024/08/15 5:15 p.m.5 views

CVE-2024-42978

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS6.1AI score0.0123EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/15 5:15 p.m.10 views

CVE-2024-42947

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 408 allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS6.1AI score0.0098EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.9 views

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a command execution vulnerability that stems from a problem with the handler function in /goform/telnet, which can be exploited by an attacker to execute arbitrary commands via specially crafted HTTP requests...

9.8CVSS8AI score0.0098EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.7 views

Tenda FH1206 安全漏洞

Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a command execution vulnerability that originates from an arbitrary command execution vulnerability contained in the handler parameter of the /goform/telnet file, whic...

9.8CVSS7.9AI score0.0123EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.9 views

PT-2024-30218 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: An issue in the handler function in "/goform/telnet" allows attackers to execute arbitrary commands via a crafted HTTP request. Recommendations: For Tenda FH1201 version 1.2.0.14, as a temporary...

9.8CVSS7.5AI score0.0098EPSS
SaveExploits1References6
CNVD
CNVD
added 2024/08/13 12:0 a.m.3 views

D-Link DAP-2622 Command Injection Remote Code Execution Vulnerability

The D-Link DAP-2622 is a wireless access point AP from D-Link designed for wireless network coverage in an enterprise or commercial environment. The D-Link DAP-2622 suffers from a Command Injection Remote Code Execution vulnerability that stems from a Telnet CLI Command Injection Remote Code...

6.8CVSS8.2AI score0.01031EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/12 1:38 p.m.29 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS0.01369EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/08/12 1:38 p.m.15 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS7.4AI score0.01369EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/12 1:38 p.m.3 views

UBUNTU-CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS6.2AI score0.01369EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/12 5:46 a.m.277 views

CVE-2024-5651 Fence-agents-remediation: fence agent command line options leads to remote code execution

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS0.01369EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/08/12 5:46 a.m.17 views

CVE-2024-5651 Fence-agents-remediation: fence agent command line options leads to remote code execution

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS9.2AI score0.01369EPSS
SaveExploits0References3
CVE
CVE
added 2024/08/12 5:46 a.m.78 views

CVE-2024-5651

CVE-2024-5651 affects the Fence Agents Remediation Operator. A flaw in handling --ssh-path/--telnet-path arguments enables Remote Code Execution, allowing a low-privilege user to craft a FenceAgentsRemediation that executes arbitrary commands on the operator pod, escalating from the operator’s se...

8.8CVSS9.2AI score0.01369EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2024/08/12 5:46 a.m.48 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS8.5AI score0.01369EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/08/12 5:46 a.m.14 views

CVE-2024-5651

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a...

8.8CVSS9.2AI score0.01369EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/08/11 12:0 a.m.18 views

PT-2024-36825 · Unknown · Fence Agents Remediation Operator

Name of the Vulnerable Software and Affected Versions: Fence Agents Remediation operator affected versions not specified Description: A flaw was found in the Fence Agents Remediation operator, allowing a Remote Code Execution RCE primitive by supplying an arbitrary command to execute in the...

8.8CVSS8.1AI score0.01369EPSS
SaveExploits0References19
GithubExploit
GithubExploit
added 2024/08/09 7:32 p.m.180 views

Exploit for Incorrect Authorization in Nexxtsolutions Nebula1200-Ac_Firmware

EN This project provides a proof-of-concept exploit for a remo...

9.8CVSS10AI score0.02556EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2024/08/09 7:32 p.m.72 views

Exploit for Incorrect Authorization in Nexxtsolutions Nebula1200-Ac_Firmware

EN This project provides a proof-of-concept exploit for a remo...

9.8CVSS9.1AI score0.02556EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.17 views

The vulnerability of the D-Link DIR-300 router’s telnet service allows a hacker to gain full control over the device.

The vulnerability of the D-Link DIR-300 router’s telnet service lies in the ability to use pre-determined credentials. Exploiting this vulnerability allows a remote attacker to gain full control over the device...

8.8CVSS6AI score0.00763EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.8 views

The vulnerability of the setTelnetCfg function in the Telnet service of TOTOLINK CP900 microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setTelnetCfg function in the Telnet service of TOTOLINK CP900 router software lies in the lack of measures to sanitize input data during the processing of the telnetenabled parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

6.5CVSS7AI score0.19907EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/08/06 4:15 p.m.10 views

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

9.8CVSS5.8AI score0.00763EPSS
SaveExploits1References2
Rows per page
Query Builder