PT-2020-12323

Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions prior to 3.7.3 Description The issue allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php. This is related to a web-base...

PT-2020-18531

Name of the Vulnerable Software and Affected Versions Shihonkanri Plus GOOUT versions 1.5.8 through 2.2.10 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For versions 1.5.8 through 2.2.10, at the moment, there is no information about a newer versio...

PT-2020-12278

Name of the Vulnerable Software and Affected Versions PerlSpeak versions through 2.01 Description The issue allows attackers to execute arbitrary OS commands. This can be demonstrated through the use of system and 2-argument open. Recommendations For PerlSpeak versions through 2.01, consider...

Design/Logic Flaw

BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3...

CVE-2020-10250

BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3...

NewStart CGSL MAIN 4.05 : vim Vulnerability (NS-SA-2020-0020)

The remote NewStart CGSL host, running version MAIN 4.05, has vim packages installed that are affected by a vulnerability: - getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by...

CVE-2020-5535

OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...

PT-2020-18510

Name of the Vulnerable Software and Affected Versions OpenBlocks IoT VX2 versions prior to 4.0.0 Description The issue allows an attacker on the same network segment to execute arbitrary OS commands with root privileges. The exact vectors used for this exploitation are not specified...

CVE-2020-9463

CVE-2020-9463 affects Centreon 19.10. The vulnerability allows a remote authenticated user to execute arbitrary OS commands via shell metacharacters in the server_ip field of a JSON payload sent to api/internal.php?object=centreon_configuration_remote. Root cause is command injection through impr...

CVE-2020-9463

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the serverip field in JSON data in an api/internal.php?object=centreonconfigurationremote request...

CVE-2020-6841

D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter...

Design/Logic Flaw

D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name...

CVE-2020-5525

Aterm series Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen...

Design/Logic Flaw

Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...

Design/Logic Flaw

Aterm series Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen...

CVE-2020-5534

Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...

PT-2020-18499

Name of the Vulnerable Software and Affected Versions Aterm WF1200C versions 1.2.1 and earlier Aterm WG1200CR versions 1.2.1 and earlier Aterm WG2600HS versions 1.3.2 and earlier Description The issue allows an attacker on the same network segment to execute arbitrary OS commands with root...

PT-2020-18500

Name of the Vulnerable Software and Affected Versions Aterm WF1200C versions 1.2.1 and earlier Aterm WG1200CR versions 1.2.1 and earlier Aterm WG2600HS versions 1.3.2 and earlier Description The issue allows an authenticated attacker on the same network segment to execute arbitrary OS commands wi...

Design/Logic Flaw

TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the t3.cgi srmodel or srtime parameter...

CVE-2020-8949

Various Gocloud and ISP3000 devices, including S2A_WL 4.2.7.16471 , S2A 4.2.7.17278 , S2A 4.3.0.15815 , S2A 4.3.0.17193 , S3A K2P MTK 4.2.7.16528 , S3A 4.3.0.16572 , and ISP3000 4.3.0.17190 , are vulnerable to an OS command injection vulnerability. The flaw exists due to the improper neutralizati...