7995 matches found
TOTOLINK T8 命令注入漏洞
TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. TOTOLINK T8 suffers from a command injection vulnerability that stems from the ip parameter of the recvSlaveUpgstatus method failing to properly filter constructed command special...
PT-2023-15562 · Nomachine · Nomachine
Name of the Vulnerable Software and Affected Versions: NoMachine versions prior to 8.2.3 Description: An issue in NoMachine allows attackers to execute arbitrary commands via a crafted .nxs file. Recommendations: For versions prior to 8.2.3, update to version 8.2.3 or later to resolve the issue. ...
CVE-2023-24153
A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...
CVE-2023-24152
A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...
TOTOLINK T8 命令注入漏洞
TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. TOTOLINK T8 suffers from a command injection vulnerability that stems from the serverIp parameter of the meshSlaveUpdate method failing to properly filter construct command special...
SUSE SLES12 Security Update : ctags (SUSE-SU-2023:0224-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0224-1 advisory. - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename bsc1206543. Tenable has extracted the preceding...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ctags (SUSE-SU-2023:0225-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0225-1 advisory. - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename bsc1206543. Tenabl...
D-Link DIR-846 操作系统命令注入漏洞
The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. The D-Link DIR-846 is vulnerable to a command execution vulnerability that could be exploited by attackers to execute arbitrary commands on the system...
TRENDnet TEW-811DRU 命令注入漏洞
TRENDnet TEW-811DRU is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-811DRU web interface component ping.ccp, which can be exploited by remote attackers to submit ad hoc requests and execute arbitrary commands...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in OpenSSL (CVE-2022-2068)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in OpenSSL, due to improper validation of user supplied input by the crehash script CVE-2022-2068. The Open SSL component is included as part of the Base OS image that is used by...
Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17069)
Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...
Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17070)
Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...
Dell PowerScale OneFS 命令注入漏洞
Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...
Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17066)
Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...
VulnCheck KEV: CVE-2023-26802
An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...
Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17067)
Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...
Arbitrary Command Execution
openmage/magento-lts is vulnerable to Arbitrary Command Execution. The vulnerability is due to the validateAgainstBlockMethodBlacklist function in Security.php which doesn't prevent custom layout enabled admin users from executing malicious commands via block methods...
The vulnerability of the UI Desktop software lies in its lack of access control mechanisms, allowing a perpetrator to execute arbitrary commands.
The vulnerability of the UI Desktop software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
CVE-2022-42484
An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2022-42484
An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...