Zabbix SQL injection vulnerability

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix that stems from SQL injection in the API service, which could lead to execution of arbitrary SQ...

MOXA EDR-810: Operating System Command Injection Vulnerability

MOXA EDR-810 is a secure router from China's MOXA MOXA. The MOXA EDR-810 suffers from a security vulnerability that originates from the NTP settings in the device's web interface, which could lead to the execution of arbitrary system commands and an infinite reboot loop by a remote attacker...

PT-2025-14464 · Moxa · Edf-G1002-Bp Series +11

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result i...

Moxa Network Device Web Interface Arbitrary Command Execution

The vulnerability of the web interface of Moxa network devices of the EDF-G1002-BP, EDR-810, EDR-8010, EDR-G9004, EDR-G9010, NAT-102, TN-4900, and OnCell G4302-LTE4 series is related to the lack of measures to neutralize specific components. Exploiting this vulnerability allows a malicious actor ...

Dell Unity OS Command Injection Vulnerability (CNVD-2025-06620)

Dell Unity is a set of virtual Unity storage environments from Dell USA. An OS command injection vulnerability exists in Dell Unity 5.4 and earlier versions, which can be exploited by an attacker to execute arbitrary operating system commands on the system...

CVE-2025-26056

A command injection vulnerability exists in Infinxt iEdge 100 version 2.1.32 within the Troubleshoot module's MTR functionality. The root cause is the improper validation of user-supplied input in the mtrIp parameter (accessible via the /generateMTRReport URL). An attacker can exploit this flaw t...

FortiSandbox GUI Arbitrary Command Execution

The vulnerability of the GUI component of the FortiSandbox threat detection and mitigation system exists because measures to neutralize its special elements have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-30004

Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user. This issue affects CompletePBX: all versions up to and prior to 5.2.35...

CVE-2025-1449

CVE-2025-1449 concerns Rockwell Automation Verve Asset Manager. Technical details from PT-2025-12814 show the vulnerability affects Verve Asset Manager versions 1.39 and earlier, caused by insufficient variable sanitizing in the administrative web interface for the Legacy Agentless Device Invento...

CVE-2025-22939

A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

CVE-2025-22941

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

CVE-2025-22939

A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

CVE-2025-2071

A critical OS Command Injection vulnerability has been identified in the FAST LTA Silent Brick WebUI, allowing remote attackers to execute arbitrary operating system commands via specially crafted input. This vulnerability arises due to improper handling of untrusted input, which is passed direct...

CVE-2025-22939

A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

CVE-2025-22939

The Adtran 411 ONT (version L80.00.0011.M2 ) is susceptible to a command injection vulnerability within its telnet service . This flaw allows an attacker to escalate privileges to root and execute arbitrary commands on the device. As no official patch is mentioned, it is recommended to disable th...

Adtran 411 ONT security vulnerability

The Adtran 411 ONT is an optical network terminal ONT from Adtran, Inc. It is used to provide fiber-to-the-home FTTH services and support high-speed Internet access. A security vulnerability exists in the Adtran 411 ONT version L80.00.0011.M2, which originates from a command injection in the teln...

PT-2025-13802

Name of the Vulnerable Software and Affected Versions Xorcom CompletePBX versions prior to 5.2.35 Description The issue affects the administrator Task Scheduler functionality, allowing attackers to execute arbitrary commands as the root user. Recommendations For versions prior to 5.2.35, update t...

PT-2025-13779

Name of the Vulnerable Software and Affected Versions Adtran 411 ONT version L80.00.0011.M2 Description A command injection issue in the web interface allows attackers to escalate privileges to root and execute arbitrary commands. Recommendations For version L80.00.0011.M2, consider restricting...

CVE-2025-22941

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

CVE-2025-3022: Improper Neutralization of Special Elements used in an OS Command

Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...