PYSEC-2017-95

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...

CVE-2017-6683

A vulnerability in the esclistener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute arbitrary commands as the tomcat user on an affected system, aka an Authentication Request Processing Arbitrary Command Execution Vulnerability. More...

CVE-2016-9984: Undefined Security Weakness

IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator. IBM X-Force ID: 120276...

CVE-2017-6683: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the esclistener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute arbitrary commands as the tomcat user on an affected system, aka an Authentication Request Processing Arbitrary Command Execution Vulnerability. More...

PT-2017-9010

Name of the Vulnerable Software and Affected Versions Cloud Foundry versions prior to v245 cf-mysql-release versions prior to v31 Description A command injection issue was discovered in a common script used by many Cloud Foundry components, allowing a malicious user to execute arbitrary commands ...

Ansible Arbitrary Command Execution Vulnerability (CNVD-2017-10546)

Ansible is a computer system configuration manager from Ansible, Inc. that can be used to publish, manage and orchestrate computer systems. An arbitrary command execution vulnerability exists in the user module in versions of Ansible prior to 1.6.6. A remote attacker can exploit this vulnerabilit...

Foscam camera remote command injection vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. Foscam camera has a remote command injection vulnerability in the modelName in the /mnt/mtd/app/config/ProductConfig.xml file. By installing the ProductConfig.xml file in...

PT-2017-3756

Name of the Vulnerable Software and Affected Versions: Cisco Secure Access Control System ACS versions prior to 5.8 Patch 7 Description: A vulnerability in the ACS Report component of Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to execute arbitrary...

PT-2018-28: Arbitrary Command Execution in Cisco Secure ACS

The specialists of the Positive Research center have detected an Arbitrary Command Execution vulnerability in Cisco Secure ACS. A vulnerability in Cisco Secure Access Control System ACS, due to insecure Java deserialization of user-supplied content, allows an unauthenticated, remote attacker to...

PT-2018-27: Arbitrary Command Execution in Cisco Secure ACS

The specialists of the Positive Research center have detected an Arbitrary Command Execution vulnerability in Cisco Secure ACS. A vulnerability in Cisco Secure Access Control System ACS, due to insufficient validation of the Action Message Format AMF protocol, allows unauthenticated, remote...

Smb4K: Arbitrary command execution as root

Background Smb4K is a SMB/CIFS Windows share browser for KDE. Description Smb4k contains a logic flaw in which mount helper binary does not properly verify the mount command it is being asked to run. Impact A local user can execute commands with the root privilege due to the mount helper being...

GLSA-201705-14 : Smb4K: Arbitrary command execution as root

The remote host is affected by the vulnerability described in GLSA-201705-14 Smb4K: Arbitrary command execution as root Smb4k contains a logic flaw in which mount helper binary does not properly verify the mount command it is being asked to run. Impact : A local user can execute commands with the...

QNAP QTS Arbitrary Command Execution Vulnerability (CNVD-2017-10394)

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. An arbitrary command execution vulnerability exists in QNAP QTS. An attacker could use this vulnerability to execute arbitrary command...

QNAP QTS Arbitrary Command Execution Vulnerability (CNVD-2017-10393)

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. An arbitrary command execution vulnerability exists in QNAP QTS. An attacker could use this vulnerability to execute arbitrary command...

Dell iDRAC6 Arbitrary Command Execution Vulnerability (CNVD-2017-09907)

Dell iDRAC6 is a remote management solution on the Dell PowerEdge family of servers. An arbitrary command execution vulnerability exists in Dell iDRAC6. An attacker could exploit this vulnerability to execute arbitrary commands in the context of an affected application, leading to further attacks...

Sierra Wireless GX440 Command Injection Vulnerability (CNVD-2017-10181)

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. The Sierra Wireless GX440 suffers from a command injection vulnerability that can be exploited by a remote attacker to submit a special request and execute arbitrary commands...

HPESBHF03730 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Command Execution, Cross-Site Scripting XSS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - All ClearPass 6.6.x version...

CVE-2015-4046: Improper Neutralization of Special Elements used in a Command

The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/doscan.php...

Arbitrary Command Execution

windows-cpu is vulnerable to arbitrary command execution. This is because the findLoad method doesn't sanitize or perform any validation before passing user-input to the shell...

NetScaler Gateway Command Execution

The vulnerability of the microprogramming software in the access control system for the NetScaler Gateway lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using uncertain vectors...