CVE-2021-21386

APKLeaks is an open-source project for scanning APK file for URIs, endpoints & secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside application manifest. An attacker could include arguments that allow unintended commands or code to be...

PT-2021-14118

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions prior to Ver.6.5 Description: The issue allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors. Recommendations: For SolarView Compact SV-CPT-MC310...

OpenEMR Operating System Command Injection Vulnerability

OpenEMR is an open source medical management system from the OpenEMR Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An operating system command injection vulnerability exists in the OpenEMR...

Command injection

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value...

CVE-2020-7848

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value...

OS Command Injection

systeminformation is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via service parameters that are passed to si.inetLatency, si.inetChecksite, si.services, si.processLoad etc...

CVE-2021-20074

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

CVE-2021-20074

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

PT-2021-13752

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue in Racom's MIDGE Firmware allows users to escape the provided command line interface and execute arbitrary OS commands. Recommendations: For version 4.4.40.105, consider...

Design/Logic Flaw

Endian Firewall Community aka EFW 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment...

CVE-2021-27201

Endian Firewall Community aka EFW 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment...

PT-2021-17319

Name of the Vulnerable Software and Affected Versions: Endian Firewall Community aka EFW version 3.3.2 Description: The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment. Recommendations: For Endian Firewall Community aka EFW...

Design/Logic Flaw

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

PT-2021-14109

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-300FEBK-S affected versions not specified Description: The issue allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. There is no information available about the estimated number of...

PT-2021-14099

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/PGRB affected versions not specified Description: The issue allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. There is no information provided about the estimated numb...

PT-2021-14100

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/PGRB affected versions not specified Description: The issue allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. There is no information provided about the estimated numb...

CVE-2021-20639: Improper Neutralization of Special Elements used in an OS Command

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20638: Improper Neutralization of Special Elements used in an OS Command

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

Input validation

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISIPRIVCLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...