CVE-2022-31795

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the grelfinfo function in grel.php. An attacker is able to influence the username user, password pw, and file-name file parameters and inject special characters...

CVE-2022-31795

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the grelfinfo function in grel.php. An attacker is able to influence the username user, password pw, and file-name file parameters and inject special characters...

CVE-2022-31794

CVE-2022-31794 affects Fujitsu ETERNUS CentricStor CS8000 Control Center prior to 8.1A SP02 P04. The issue is in hw_view.php: the function requestTempFile can be influenced via the unitName POST parameter, allowing an attacker to inject special characters (e.g., semicolons, backticks, command-sub...

CVE-2022-31795: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 Control Center devices before 8.1A SP02 P04. The vulnerability resides in the grelfinfo function in grel.php. An attacker is able to influence the username user, password pw, and file-name file parameters and inject special characters...

WAVLINK AERIAL X 1200M Command Injection Vulnerability

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to a command injection vulnerability in version M79X3.V5030.180719, which stems from the execution of a POST received in adm.cgi spliced directly into a system function, which can be exploited by an attacker to exploit this...

PT-2022-21861

Name of the Vulnerable Software and Affected Versions CA Automic Automation versions 12.2 through 12.3 Description The issue is related to an authentication error in the Automic agent, which could allow a remote attacker to potentially execute arbitrary commands. Recommendations For CA Automic...

CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-31311: Improper Neutralization of Special Elements used in an OS Command

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

PT-2022-20683 · Wavlink · Wavlink Aerial X 1200M

Name of the Vulnerable Software and Affected Versions: WAVLINK AERIAL X 1200M version M79X3.V5030.180719 Description: The issue allows attackers to execute arbitrary commands via a crafted POST request to the adm.cgi endpoint. This is achieved by sending a specifically designed request to the...

PT-2022-3766

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description The issue is related to command injection vulnerabilities in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can se...

PT-2022-3796

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description Multiple command injection vulnerabilities exist in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a...

PT-2022-3909 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 version 3.3.0 Description: The issue is related to command injection vulnerabilities in the web server's ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker ca...

WAVLINK AERIAL X 1200M: Operating System Command Injection Vulnerability

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to a command injection vulnerability in version M79X3.V5030.180719, which stems from the execution of a POST received in adm.cgi spliced directly into a system function, which can be exploited by an attacker to exploit this...

PT-2022-3908

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description Multiple command injection vulnerabilities exist in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a...

LibreNMS Command Injection Vulnerability (CNVD-2022-91160)

LibreNMS is a PHP and MySQL based open source network monitoring system from the LibreNMS community. LibreNMS v22.3.0 contains a command injection vulnerability that stems from the failure of the serviceip, hostname and serviceparam parameters to properly filter the construct command special...

Arbitrary Command Execution

jmespath is vulnerable to arbitrary command execution. An attacker is able to inject and execute arbitrary commands due to the unsafe usage of JSON.load where JSON.parse is preferable...

PT-2022-8314

Name of the Vulnerable Software and Affected Versions 3CX Phone System versions 16.0.0.1570 Description The issue allows an authenticated attacker to execute arbitrary commands with the phonesystem user privileges due to the mishandling of a specific input sequence, namely " followed by "...

Fortinet FortiAP-S/W2 Command Injection

The vulnerability of Fortinet FortiAP-S/W2 and FortiAP lies in the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2022-1804)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pip...