18174 matches found
Moxa TN-5900 Command Injection Vulnerability
Moxa Tn-5900 is a series of En50155 wall-mounted routers from Moxa, China.A command injection vulnerability exists in Moxa TN-5900, which is caused when the network system or product fails to properly filter special characters, commands, etc. during the execution of commands entered by the user. ...
Mageia: Security Advisory (MGASA-2017-0263)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Reolink RLC-410W Command Injection Vulnerability
Reolink Rlc-410W is a Wifi security camera from Reolink China.A command injection vulnerability exists in Reolink RLC-410W version v3.0.0.13620121102, which stems from the failure of the network system or product to properly filter special characters, commands, etc., during the execution of...
Western Digital My Cloud 命令注入漏洞
Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud that could allow an attacker to execute arbitrary system commands on the device...
Mageia: Security Advisory (MGASA-2014-0476)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0292)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei AIS-BW80H-00 Command Injection Vulnerability
Huawei AIS-BW80H-00 is a smart speaker device from Huawei China. Huawei AIS-BW80H-00 is vulnerable to a command injection vulnerability caused by the device's inability to effectively defend against malicious outside interference. A local attacker could exploit the vulnerability to pass specially...
Mageia: Security Advisory (MGASA-2017-0200)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
showdoc SQL注入漏洞
showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...
MingSoft Mcms SQL注入漏洞
MingSoft Mcms is China's Ming Fei MingSoft company a complete open source J2ee system . mingSoft MCMS suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to...
Huawei AIS-BW80H-00 命令注入漏洞
Huawei AIS-BW80H-00 is a smart speaker device from Huawei China. Huawei AIS-BW80H-00 is vulnerable to a command injection vulnerability caused by the device's inability to effectively defend against malicious outside interference. A local attacker could exploit the vulnerability to pass specially...
MingSoft Mcms SQL注入漏洞
MingSoft Mcms is China's MingFei MingSoft company's a complete open source J2ee system . A security vulnerability exists in MingSoft Mcms that stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...
Vulnerabilities of the built-in software on NETGEAR Wi-Fi routers such as R6700AX, R7800, R8900, R9000, RAX10, RAX120v1, RAX120v2, RAX70, RAX78, XR450, XR500, XR700, and the low-cost LTE modem LBR1020; vulnerabilities of the wireless signal amplifiers EX2700, WN3000RPv2, WN3000RPv3; and vulnerabilities of the Orbi Wi-Fi system LBR20—all related to the lack of measures to protect input data. These vulnerabilities allow attackers to execute arbitrary commands or gain unauthorized access to protected information.
The vulnerabilities of NETGEAR Wi-Fi routers such as R6700AX, R7800, R8900, R9000, RAX10, RAX120v1, RAX120v2, RAX70, RAX78, XR450, XR500, XR700, and the low-cost LTE modem LBR1020, as well as wireless signal amplifiers like EX2700, WN3000RPv2, WN3000RPv3, and the Orbi Wi-Fi system LBR20, are...
FreeCad 操作系统命令注入漏洞
FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports the Finite Element Method of building information modeling software. A security vulnerability exists in FreeCAD 0.19 that allows attackers to execute arbitrary commands via a crafte...
SourceCodester Budget and Expense Tracker System SQL注入漏洞
SourceCodester Budget And Expense Tracker System is a web-based application from Carlo Montero's personal developer. SourceCodester Budget and Expense Tracker System is vulnerable in v1.0 due to a lack of SQL data escaping and filtering in the software. An attacker could use the user name field t...
The vulnerability of microprogrammed software in NETGEAR’s network devices such as D7800, EX2700, WN3000RPv2, and WN3000RPv3 lies in the insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information or execute arbitrary commands.
The vulnerability of microprogrammed network devices such as NETGEAR D7800, EX2700, WN3000RPv2, and WN3000RPv3 lies in the insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information or execute arbitrary...
The vulnerability of NETGEAR CBR40, CBR750, EAX20, EAX80, LAX20, MR60, MR80, MS60, MS80, MK62, MK83, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, XR1000, XR300 are related to insufficient cleaning of input data, allowing attackers to execute arbitrary commands.
The vulnerability of Microprogrammed Wi-Fi router software from NETGEAR, including models CBR40, CBR750, EAX20, EAX80, LAX20, MR60, MR80, MS60, MS80, MK62, MK83, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2,...
The vulnerability of NETGEAR’s Wi-Fi routers—CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850—is related to insufficient cleaning of input data, allowing attackers to execute arbitrary commands.
The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
SourceCodester Online Leave Management System SQL注入漏洞
SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...
