WatchGuard RapidStream Elevation of Privilege Vulnerability

WatchGuard RapidStream is a firewall appliance from WatchGuard USA. An elevation of privilege vulnerability exists in the WatchGuard RapidStream appliance. A local attacker can exploit this vulnerability with a specially crafted ifconfig command to gain privileges and execute arbitrary commands...

imo cloud Office system get_file.php parameter nid arbitrary command execution vulnerability

No description provided by source...

Cisco TelePresence Video Communication Server Expressway Command Injection Vulnerability

Cisco TelePresence Video Communication Server Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end-users using a variety of communication tools. A remote...

Arbitrary Command Execution Vulnerability in Internet Audit Device of Shenzhen Aolian Information Security Technology Co.

Shenzhen Aolian Information Security Technology Co., Ltd. Internet access auditing device is a network behavior management system. Shenzhen Aolian Information Security Technology Co., Ltd. Internet Audit Equipment has an arbitrary command execution vulnerability, which can be exploited by attacke...

Arbitrary Command Execution Vulnerability in Internet Behavior Management System of Shanghai Bingfeng Computer Network Technology Co.

Shanghai Bingfeng Computer Network Technology Co., Ltd Internet behavior management system is a network audit equipment. The Internet behavior management system of Shanghai Bingfeng Computer Network Technology Co., Ltd. has an arbitrary command execution vulnerability, which can be exploited by...

Arbitrary Command Execution Vulnerability in D-Link Internet Behavior Management System

Internet behavior management system, a network auditing device. The product suffers from an arbitrary command execution vulnerability that can be exploited by an attacker to gain server privileges...

Arbitrary Command Execution Vulnerability in Beijing Tianrongxin Internet Behavior Management Devices

Tianrongxin Internet Behavior Management System is a professional product for network behavior management and content auditing. Beijing Tianrongxin Internet Behavior Management device has an arbitrary command execution vulnerability, which can be exploited by attackers to gain server privileges...

CVE-2016-1608

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter...

Arbitrary Command Execution Vulnerability in DotDotStarlight Gateway Cloud Platform of Beijing DotDotStarlight Technology Co.

Beijing Dot Starlight Technology Co., Ltd. is a professional company specializing in the production of Internet access equipment. It mainly produces authentication billing system, PPPOE gateway, BRAS, machine room dynamic ring monitoring system, urban fire protection system, intelligent public...

Barracuda Web App Firewall and Load Balancer Remote Command Injection Vulnerability

Barracuda Web Application Firewall and Load Balancer are both products of Barracuda Networks. The former is a Web application firewall and the latter is an application delivery controller. The controller provides protection against intrusions and attacks, while optimizing application load and...

[SECURITY] [DLA 564-1] tardiff security update

Package : tardiff Version : 0.1-1+deb7u1 CVE ID : CVE-2015-0857 CVE-2015-0858 Two vulnerabilities were found in tardiff: CVE-2015-0857 Arbitrary command execution was possible via shell metacharacters in the name of a 1 tar file or 2 file within a tar file. CVE-2015-0858 Local users could write t...

CA eHealth Denial of Service Vulnerability

CA eHealth is CA's suite of software for intelligently managing complex IT environments through the IT infrastructure. The software supports monitoring, collecting and analyzing network information from network performance, virtual systems and Cisco Unified Computing Systems to provide real-time...

ZTE enterprise gateway system voip_eone.be.php parameters hid_id, etc. 2 arbitrary command execution vulnerability

No description provided by source...

D-Link DCS-930L Camera Command Injection Vulnerability

The D-Link DCS-930L is a wireless surveillance camera from Terasic D-Link. A command injection vulnerability exists in the D-Link DCS-930L Camera. An attacker can exploit this vulnerability to execute arbitrary commands in the context of an affected device...

Glacier smart DNS traffic optimization system nslookup_cgi. cgi arbitrary command execution

No description provided by source...

NetApp OnCommand System Manager Local Command Injection Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from the American company NetApp. A local command injection vulnerability exists in NetApp OnCommand System Manager version 8.3.x, which can be exploited by an attacker to inject arbitrary commands into the application...

The vulnerability of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to execute arbitrary commands.

The vulnerability of the Web interface of the Cisco Prime Infrastructure network lifecycle management software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted values for certain...

CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

Nagios XI Command Injection (CVE-2018-8735; CVE-2018-8736)

A Command Injection vulnerability exists in Nagios XI. Successful exploitation will result in arbitrary command execution with root privileges...

Arbitrary Command Execution Vulnerability in the Call Center of Shenzhen Jishi Communication Co.

The call center of Shenzhen Jishu Communication Co., Ltd. is a new generation of enterprise-level call center system. An arbitrary command execution vulnerability exists in the call center of Shenzhen JTS Communications Co. By constructing the $POST parameter without any filtering measures, it...