1Panel Linux Control Panel Command Injection

The vulnerability of the 1Panel Linux server’s control panel is related to the lack of measures taken to neutralize special elements used in the operating system when adding container repositories. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

FortiTester Command Injection

The vulnerability of the graphical and application software interface of the FortiTester hardware-based diagnostic and audit software exists due to the failure to take measures to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a...

ArubaOS Web Interface Command Injection

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ArubaOS Command Injection

The vulnerability of the ArubaOS operating systems exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

SUSE Rancher Command Injection

The vulnerability of the software platform for container deployment in the SUSE Rancher wrangler production environment exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execu...

tcpdump Command Execution

The vulnerability of the tcpdump web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Zoom Client for Meetings RCE

The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Linux exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CentreCOM AR260S Arbitrary Command Execution

The vulnerability of the microprogrammed software of the CentreCOM AR260S V2 router exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary shell commands on the...

vRealize Log Insight Data Compromise

The vulnerability of the export function of the vRealize Log Insight management tool exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

NSX for vSphere and Cloud Foundation Command Injection

The vulnerability of the NSX for vSphere and Cloud Foundation network virtualization platforms exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...

TP-Link TL-WR802N Router Command Injection

The vulnerability of TP-Link TL-WR802N router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Cisco IOS XR CLI Privilege Escalation

The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary...

OneDev LDAP Disclosure

The vulnerability of the OneDev collaborative development platform lies in the lack of measures to neutralize special elements in the LDAP request. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...

DSGVO Plugin XSS

The vulnerability of the DSGVO plugin for WordPress content management systems involves the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

RSA Security Analytics Netwitness Platform Command Injection

The vulnerability of the RSA Security Analytics and Netwitness Platform security tools exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

EyesOfNetwork nagios_path Command Execution

The vulnerability of the nagiospath parameter lilac/export.php of the monitoring software for systems and networks, EyesOfNetwork EON, is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker ...

Cisco ASA CLI Command Injection

The vulnerability of the command-line interface CLI of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the lack of measures to neutralize the special elements used in operating system commands. Exploiting this vulnerability can allow attackers to...

Junos license-check Arbitrary Command Execution

The vulnerability of the Junos operating system’s license-check mechanism is related to the failure to implement measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

Cisco IOS XR Privilege Escalation

The vulnerability of the command-line interface of Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 8000 Series exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command. Exploiting this vulnerability can allow...

chrome-launcher Command Injection

The vulnerability of the chrome-launcher software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...