11721 matches found
CVE-2019-17526: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context of an internet facing web application. Malicious actors can execute arbitrary commands on the underlying operating system, as demonstrated by an import'os'.popen'whoami'.read...
CVE-2019-13411
An “invalid command” handler issue was discovered in HiNet GPON firmware I040GWR190731. It allows an attacker to execute arbitrary command through port 3097. CVSS 3.0 Base score 10.0. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H...
CVE-2019-13411: Undefined Security Weakness
An “invalid command” handler issue was discovered in HiNet GPON firmware I040GWR190731. It allows an attacker to execute arbitrary command through port 3097. CVSS 3.0 Base score 10.0. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H...
CVE-2019-15066: Undefined Security Weakness
An “invalid command” handler issue was discovered in HiNet GPON firmware I040GWR190731. It allows an attacker to execute arbitrary command through port 6998. CVSS 3.0 Base score 10.0. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H...
PT-2019-13323
Name of the Vulnerable Software and Affected Versions HiNet GPON firmware versions prior to I040GWR190731 Description A handler issue for "invalid commands" was found, allowing an attacker to execute arbitrary commands through port 3097. Recommendations For versions prior to I040GWR190731, update...
PT-2019-13965
Name of the Vulnerable Software and Affected Versions HiNet GPON firmware versions prior to I040GWR190731 Description A handler issue for "invalid commands" was found, allowing an attacker to execute arbitrary commands through port 6998. Recommendations For versions prior to I040GWR190731, update...
PT-2019-13465
Name of the Vulnerable Software and Affected Versions CA Performance Management versions 3.5.x through 3.6.8 and versions 3.7.x through 3.7.3 Description The issue allows a remote attacker to execute arbitrary commands and compromise system security due to a default credential vulnerability...
Podman Varlink 1.5.1 - Remote Code Execution
Podman Varlink 1.5.1 - Remote Code Execution Exploit Title: Podman & Varlink 1.5.1 - Remote Code Execution Exploit Author: Jeremy Brown Date: 2019-10-15 Vendor Homepage: https://podman.io/ Software Link: dnf install podman or https://github.com/containers/libpod/releases Version: 1.5.1 Tested on:...
Podman / Varlink Remote Code Execution
!/usr/bin/python -- coding: UTF-8 -- pickletime.py Podman + Varlink Insecure Config Remote Exploit Jeremy Brown jbrown3264/gmail @ Oct 2019 ------- Details ------- Podman is container engine / platform similar to Docker supported by RedHat and Fedora with Varlink being a protocol to exchange...
D-Link DIR-846 Arbitrary OS Command Execution Vulnerability
The D-Link DIR-846 is a 6-antenna 1200M full gigabit dual-band MU-MIMO wireless router. An arbitrary OS command execution vulnerability exists in the D-Link DIR-846 with firmware version 100A35. A remote attacker can exploit the vulnerability by sending /HNAP1/ request to...
D-Link DIR-846 Arbitrary OS Command Execution Vulnerability (CNVD-2019-39549)
The D-Link DIR-846 is a 6-antenna 1200M full gigabit dual-band MU-MIMO wireless router. An arbitrary OS command execution vulnerability exists in the D-Link DIR-846 with firmware version 100A35. A remote attacker can exploit this vulnerability to execute arbitrary OS commands as root user by...
CVE-2017-15041
An arbitrary command execution flaw was found in the way Go's "go get" command handled the checkout of source code repositories. A remote attacker capable of hosting malicious repositories could potentially use this flaw to cause arbitrary command execution on the client side...
CVE-2019-9535
A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. This vulnerability may allow an attacker to execut...
CVE-2019-9535
A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. This vulnerability may allow an attacker to execut...
CVE-2019-9535
Summary of CVE-2019-9535 (iTerm2 tmux integration RCE) : iTerm2 versions up to 3.3.5 are vulnerable to remote code execution via the tmux control mode integration, where crafted terminal output can execute arbitrary commands on a victim’s machine. Reported across multiple sources (NVD, OSV, CERT/...
CVE-2019-12735
It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution. Mitigation The vulnerability can be triggered only if modeline is enabled. You can check...
CVE-2019-9535: Acceptance of Extraneous Untrusted Data With Trusted Data
A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including 3.3.5. This vulnerability may allow an attacker to execut...
PT-2019-19692
Name of the Vulnerable Software and Affected Versions iTerm2 versions up to and including 3.3.5 Description A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal...
FTD Multi-connection Mode Privilege Escalation
The vulnerability of the multi-connection mode of the Firepower Threat Defense FTD software relates to security configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges from within the FTD instance...