ZBT WE1626 security vulnerabilities

The ZBT WE1626 is a router. A security vulnerability exists in the ZBT WE1626 version v21.06.18 that originates from allowing an attacker to execute arbitrary commands via a serial connection to the UART port...

StarSoftComm HP CooCare security vulnerability

StarSoftComm HP CooCare is a remote diagnostic software from StarSoftComm China. A security vulnerability exists in StarSoftComm HP CooCare version 5.304. An attacker can exploit the vulnerability to elevate privileges and execute arbitrary commands by uploading specially crafted files...

PT-2023-2027

Name of the Vulnerable Software and Affected Versions starsoftcomm CooCare version 5.304 Description The issue is related to insecure privilege management in the CooCare software, allowing local attackers to escalate privileges and execute arbitrary commands via a crafted file upload. This can...

CVE-2022-45988: Improper Privilege Management

starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload...

QTS QuTS Command Injection

The vulnerability of the QTS and QuTS operating systems is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a special HTTP request...

SUSE Rancher Command Injection

The vulnerability of the software platform for container deployment in the SUSE Rancher wrangler production environment exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execu...

CVE-2023-22765 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

PT-2023-1569

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue exists due to the lack of neutralization of special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands using specially crafte...

PT-2023-1680 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to the lack of input sanitization in the command line interface of ArubaOS, which can be exploited by a remote attacker to execute arbitrary commands as a privileged us...

Sql injection

A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...

CVE-2022-2024

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11...

Apache Airflow input validation vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Google Provider...

CVE-2023-20050: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...

Cisco NX-OS Software: Operating System Command Injection Vulnerability

Cisco NX-OS Software is a suite of data center-grade operating system software used by Cisco's switches in the United States. A security vulnerability exists in Cisco NX-OS Software that stems from insufficient validation of parameters passed to specific CLI commands. An attacker exploiting this...

Amazon Linux 2 : git (ALAS-2023-1943)

The version of git installed on the remote host is prior to 2.23.1-0. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1943 advisory. A flaw was found in the git fast-import command where it provides the export-marks feature that may unexpectedly overwrite...

CVE-2023-20050

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...

PT-2023-14717

Name of the Vulnerable Software and Affected Versions Aztech WMB250AC Mesh Routers Firmware Version 016 2020 Description The issue concerns improper session management in the affected devices, allowing remote attackers to bypass authentication and execute arbitrary commands with administrator...

K61002104: BIG-IP AFM and PEM TMUI XSS vulnerability CVE-2019-6639

Security Advisory Description Undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting XSS issue. This is a control plane issue only and is not accessible from the data plane. The attack requires a malicious resource administrator to store the...

K45625134: Apache Subversion vulnerability CVE-2017-9800

Security Advisory Description A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a...

K04481502: Ghostscript vulnerability CVE-2021-3781

Security Advisory Description A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the...