18169 matches found
CVE-2022-45526
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
Sql injection
SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...
The vulnerability of the PostgreSQL database management system, related to an uncontrolled search path element, allows a perpetrator to enhance their privileges and execute arbitrary commands.
The vulnerability of the PostgreSQL database management system is related to an uncontrolled element in the search path processing when handling the searchpath parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...
A critical flaw in Cisco IOx Root Access Threat has been discovered
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Cisco has issued security patches to address a high-severity vulnerabilityCVE-2023-20076 in the Cisco IOx application hosting environment that can be exploited to execute arbitrary commands as roo...
TOTOLINK T8 updateWifiInfo Method Command Injection Vulnerability
TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. TOTOLINK T8 suffers from a command injection vulnerability that stems from the serverIp parameter of the updateWifiInfo method failing to correctly filter constructed command special...
D-Link DIR-846 Command Execution Vulnerability (CNVD-2023-27681)
The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. The D-Link DIR-846 is vulnerable to a command execution vulnerability that could be exploited by attackers to execute arbitrary commands on the system...
TRENDnet TEW-811DRU Command Injection Vulnerability (CNVD-2023-22721)
TRENDnet TEW-811DRU is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-811DRU web interface component ping.ccp, which can be exploited by remote attackers to submit ad hoc requests and execute arbitrary commands...
TRENDnet TEW-811DRU Command Injection Vulnerability
TRENDnet TEW-811DRU is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-811DRU web interface component, which can be exploited by attackers to submit ad hoc requests and execute arbitrary commands...
Command Injection
is-http2 is vulnerable to Command Injection. The vulnerability exists in the Promise function of index.js due to missing input sanitization which allows an attacker to inject and execute arbitrary commands into the system...
CVE-2021-36484
SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page...
CVE-2021-36484
SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page...
CVE-2021-36433
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jodeletemask function in jocms/apps/mask/mask.php...
Sql injection
SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page...
Command injection
A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...
Command injection
A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...
CVE-2022-48074
An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...
Design/Logic Flaw
An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file...
CVE-2023-24150
A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet...
CVE-2021-36431
CVE-2021-36431 concerns a SQL injection in the Jocms 0.8 CMS. The vulnerability occurs in the function jo_json_check() within jocms/apps/mask/inc/mask.php, allowing remote attackers to execute arbitrary SQL and view sensitive data. CVSSv3.1 metrics in the public entries indicate a Network attack ...