9360 matches found
The vulnerability of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to execute arbitrary commands.
The vulnerability of the Web interface of the Cisco Prime Infrastructure network lifecycle management software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted values for certain...
CVE-2016-1456
The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...
Arbitrary Command Execution Vulnerability in the Call Center of Shenzhen Jishi Communication Co.
The call center of Shenzhen Jishu Communication Co., Ltd. is a new generation of enterprise-level call center system. An arbitrary command execution vulnerability exists in the call center of Shenzhen JTS Communications Co. By constructing the $POST parameter without any filtering measures, it...
Nagios XI Command Injection (CVE-2018-8735; CVE-2018-8736)
A Command Injection vulnerability exists in Nagios XI. Successful exploitation will result in arbitrary command execution with root privileges...
Pivotal Software Spring Framework Arbitrary Command Execution Vulnerability
Pivotal Software Spring Framework is the U.S. Pivotal Software's set of open source Java, Java EE application framework. The framework helps developers build high-quality applications . An arbitrary command execution vulnerability exists in Pivotal Software Spring Framework. An attacker can explo...
Vulnerabilities of the Alt Linux SPT operating system, which allow a malicious attacker to disable the device’s functionality
Multiple vulnerabilities in the bash command-line interpreter of the Altron Linux SPT operating system are caused by errors in processing input data during syntax analysis of code. Exploiting these vulnerabilities allows a malicious individual to execute arbitrary commands with the privileges of...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to execute arbitrary system commands.
The web interface of the router allows for the execution of a limited number of system commands ping, traceroute, dnslookup. However, it is possible to execute any command that is separated by a system separator from the allowed commands...
PT-2016-5989 · Bosch Rexroth · Bladecontrol-Webvis
Name of the Vulnerable Software and Affected Versions: Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations: For Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier, at the...
The vulnerability of the Oracle Fusion Middleware software platform allows a malicious individual to execute arbitrary commands, disrupt the logic of the script, and obtain the original script code.
The vulnerability of the Oracle Containers platform’s J2EE component in Oracle Fusion Middleware software relates to an error that occurs due to improper handling of the zero byte during the transmission of a request to another static page or JSP script using functions like pageContext.forward or...
BMC Server Automation RSCD Agent Weak ACL NSH Arbitrary Command Execution
Binary data bmcrscdnshaclcheck.nbin...
XpoLog Center 6 - Remote Command Execution Cross-Site Request Forgery
XpoLog Center 6 - Remote Command Execution Cross-Site Request Forgery XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management...
XpoLog Center 6 - Remote Command Execution / Cross-Site Request Forgery
Exploit for jsp platform in category web applications XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc:...
XpoLog Center 6 - Remote Command Execution / Cross-Site Request Forgery
XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from arbitrary command execution. Attackers...
CVE-2016-1408
Cisco Prime Infrastructure (PI) versions 1.2–3.1 and EPNM versions 1.2–2.0 expose a web-UI vulnerability that allows an authenticated, remote attacker to upload arbitrary files and execute commands via a crafted HTTP request. The root cause is incomplete input validation in the web interface. Imp...
XpoLog Center 6 Cross Site Request Forgery
XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from arbitrary command execution. Attackers...
MileSight camera privilege control page unauthorized access vulnerability
MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. An unauthorized access vulnerability exists in the privilege control page of MileSight camera. An unauthorized attacker can use the vulnerability to execute arbitrary commands...
Arbitrary Command Execution Vulnerability in a System of China Soft Technology
Ltd. is a product of the implementation of the pilot project of knowledge innovation by the Institute of Software of the Chinese Academy of Sciences, and is the result of the restructuring of the main body of the Institute's technological research and development. An arbitrary command execution...
PT-2016-6165 · Corega · Corega Cg-Wlbargl
Name of the Vulnerable Software and Affected Versions: Corega CG-WLBARGL devices affected versions not specified Description: The issue allows remote authenticated users to execute arbitrary commands via unspecified vectors. Recommendations: At the moment, there is no information about a newer...
IBM MessageSight Arbitrary Command Execution Vulnerability
IBM MessageSight is an IBM messaging appliance designed for machine-to-machine m2m and mobile environments that supports real-time processing of large numbers of events and provides messaging capabilities inside and outside the enterprise. An arbitrary command execution vulnerability exists in IB...
