CVE-2016-15048 AMTT HiBOS Command Injection RCE via server_ping.php

AMTT Hotel Broadband Operation System HiBOS contains an unauthenticated command injection vulnerability in the /manager/radius/serverping.php endpoint. The application constructs a shell command that includes the user-supplied ip parameter and executes it without proper validation or escaping. An...

VulnCheck KEV: CVE-2016-15048

AMTT Hotel Broadband Operation System HiBOS contains an unauthenticated command injection vulnerability in the /manager/radius/serverping.php endpoint. The application constructs a shell command that includes the user-supplied ip parameter and executes it without proper validation or escaping. An...

AMTT Hotel Broadband Operation System 安全漏洞

AMTT Hotel Broadband Operation System is a hotel broadband operation system from China-based AmTech Century AMTT. A security vulnerability exists in the AMTT Hotel Broadband Operation System, which originates from an unauthenticated command injection in the /manager/radius/serverping.php endpoint...

CVE-2025-34513

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbusbuildfromcsv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to...

CVE-2025-34513

Ilevia EVE X1 Server firmware ≤ 4.7.18.0.eden contains a pre-authentication OS command injection in mbus_build_from_csv.php (/ajax/php/mbus_build_from_csv.php), allowing unauthenticated code execution. Multiple sources (NVD, Red Hat CVE page, CIRCL, ZSL) confirm unauthenticated remote command exe...

📄 Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Remote Command Injection

Ilevia EVE X1 Server versions 4.7.18.0.eden and below suffer from an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through the mbusfile and mbuscsv HTTP POST parameters through the /ajax/php/mbusbuildfromcsv.php script...

EUVD-2018-8947

Malware in sbrugna...

EUVD-2017-15270

Malware in sbrugna...

EUVD-2012-6587

Malware in sbrugna...

EUVD-2012-6592

Malware in sbrugna...

EUVD-2010-5304

Malware in sbrugna...

CVE-2025-36354 IBM Security Verify Access command execution

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input...

CVE-2025-36354 IBM Security Verify Access command execution

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input...

EUVD-2022-49223

Malicious code in bioql PyPI...

EUVD-2023-32350

Malicious code in bioql PyPI...

EUVD-2025-29647

Malicious code in bioql PyPI...

EUVD-2025-25810

Malicious code in bioql PyPI...

EUVD-2025-19644

Malicious code in bioql PyPI...

EUVD-2021-7598

Malicious code in bioql PyPI...

EUVD-2021-7600

Malicious code in bioql PyPI...