CVE-2019-13079

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/historylog.php. The affected parameter is TYPENAME...

USN-4175-1 ruby-nokogiri vulnerability

It was discovered that Nokogiri incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands...

Command Execution Vulnerability in Nexus Repository Manager

Sonatype Nexus is a Maven repository management system that provides powerful repository management, component search, and can be used to build a Maven repository self-service to save bandwidth and time by maintaining a local repository while proxying a remote repository. A command execution...

PHPUnit Command Injection (CVE-2017-9841)

A command injection vulnerability exists in PHPUnit. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands in the affected system...

Node.js third-party modules: [meta-git] RCE via insecure command formatting

I would like to report a RCE issue in the meta-git module. It allows to execute arbitrary commands remotely inside the victim's PC Module module name: meta-git version: 1.1.2 npm page: https://www.npmjs.com/package/meta-git Module Description git plugin for meta Module Stats 60 downloads in the...

CVE-2011-3923

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands...

Design/Logic Flaw

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands...

CVE-2011-3923

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands...

Command injection

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands...

heketi: heketi can be installed using insecure defaults

It was found that the default configuration of Heketi does not require any authentication, potentially exposing the Heketi server API to be misused. An unauthenticated attacker could connect remotely to Heketi Server and run arbitrary commands supported by Heketi Server API via Heketi CLI...

CVE-2011-2538

Cisco Video Communications Server VCS before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands...

Command injection

Cisco Video Communications Server VCS before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands...

Code Execution Vulnerability in MyuCMS

MyuCMS is a community mall building system developed using ThinkPHP, which is lightweight, fast and easy to expand. A code execution vulnerability exists in MyuCMS, which can be exploited by attackers to execute illegal commands...

The vulnerability of the command-line interface (CLI) of Cisco Firepower Threat Defense microprogramming systems allows a attacker to execute arbitrary commands on the base operating system with root privileges.

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the base operating system with root privileges...

CVE-2011-2538

Cisco Video Communications Server VCS before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands...

CVE-2011-2538

Cisco Video Communications Server VCS before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands...

Xiaomi Mi WiFi R3G Command Injection Vulnerability

The Xiaomi Mi WiFi R3G is a 3G router from the Chinese company Xiaomi Technology. A security vulnerability exists in the Xiaomi Mi WiFi R3G backup file upload handling, which allows remote attackers to exploit the vulnerability to submit a special request that can execute arbitrary OS commands...

Artifex Ghostscript < 9.50 Multiple Vulnerabilities

The version of Artifex Ghostscript installed on the remote Windows host is prior to 9.50. It is, therefore, affected by multiple security bypass vulnerabilities. An attacker could exploit one of these vulnerabilities to gain access to the file system and execute arbitrary commands. C Tenable...

The vulnerability of Moxa EDS-810 microcontroller-based web consoles arises from insufficient checking of input data, allowing attackers to execute arbitrary commands.

The vulnerability of Moxa EDS-810 microcontroller-based web consoles exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Joomla Object Injection

Added: 10/24/2019 Background Joomla is a content management system written in PHP. Problem An object injection vulnerability in Joomla could allow a remote, unauthenticated attacker to execute arbitrary commands on the server. This vulnerability has been nicknamed "Rusty Joomla". Resolution Upgra...