TOTOLINK T8 Command Injection Vulnerability

TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. TOTOLINK T8 suffers from a command injection vulnerability that stems from the ip parameter of the recvSlaveCloudCheckStatus method failing to correctly filter constructed command special...

TOTOLINK T8 Command Injection Vulnerability

TOTOLINK T8 is a wireless dual-band router that is mainly used for internet connection and data transmission. TOTOLINK T8 suffers from a command injection vulnerability that stems from the serverIp parameter of the meshSlaveUpdate method failing to properly filter construct command special...

CVE-2022-48074

NoMachine before version 8.2.3 is affected. A vulnerability allows an attacker to execute arbitrary commands by processing a crafted ".nxs" file. Affected software: NoMachine (prior to 8.2.3); attack vector involves opening or handling a crafted .nxs file. Underlying root cause details are not ex...

D-Link DIR-846: Operating System Command Injection Vulnerability

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. The D-Link DIR-846 is vulnerable to a command execution vulnerability that could be exploited by attackers to execute arbitrary commands on the system...

TRENDnet TEW-811DRU command injection vulnerability

TRENDnet TEW-811DRU is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-811DRU web interface component ping.ccp, which can be exploited by remote attackers to submit ad hoc requests and execute arbitrary commands...

SUSE SLES12 Security Update : ctags (SUSE-SU-2023:0224-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0224-1 advisory. - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename bsc1206543. Tenable has extracted the preceding...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ctags (SUSE-SU-2023:0225-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0225-1 advisory. - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename bsc1206543. Tenabl...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in OpenSSL (CVE-2022-2068)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary command execution in OpenSSL, due to improper validation of user supplied input by the crehash script CVE-2022-2068. The Open SSL component is included as part of the Base OS image that is used by...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17066)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17069)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17070)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

VulnCheck KEV: CVE-2023-26802

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17067)

Siretta QUARTZ-GOLD is an industrial router with multiple features and services.A buffer overflow vulnerability exists in Siretta QUARTZ-GOLD, which can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

Dell PowerScale OneFS Command Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...

Arbitrary Command Execution

openmage/magento-lts is vulnerable to Arbitrary Command Execution. The vulnerability is due to the validateAgainstBlockMethodBlacklist function in Security.php which doesn't prevent custom layout enabled admin users from executing malicious commands via block methods...

UI Desktop Access Control Command Execution

The vulnerability of the UI Desktop software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2022-42484

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-42484

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-42484

CVE-2022-42484 affects FreshTomato 2022.5 in the httpd logs/view.cgi OS command injection. TALOS reports confirm an OS command injection vulnerability (and related directory traversal) that can trigger arbitrary code execution via crafted HTTP requests. Impact is remote command execution with web...

CVE-2022-42484

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...