18168 matches found
CVE-2019-11217
The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request...
CVE-2019-11076
Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...
Cross site request forgery (csrf)
Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...
CVE-2019-11076
Cribl UI 1.5.0 is affected by a remote command execution vulnerability described in CNVD-2019-12471 and CVE-2019-11076. The flaw allows a remote attacker to execute arbitrary commands via an unauthenticated web request to Cribl UI, enabling full execution on the server side without credentials. T...
CVE-2019-11076
Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...
CVE-2016-1579
UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UD...
GLSA-201811-05 : PHProjekt: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201811-05 PHProjekt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHProjekt due to embedded Zend Framework. Please review the GLSA identifiers referenced below for details. Impact : Remote attackers...
Valve: [Source Engine] Material path truncation leads to Remote Code Execution
Title: Source Engine Material path truncation leads to Remote Code Execution Scope: .exe Weakness: Improper Input Validation Severity: High 7.1 Link: https://hackerone.com/reports/544096 Date: 2019-04-20 12:18:09 +0000 By: @nyancat0131 Details: Summary The handler of matcrosshairedit command...
Verizon Fios Quantum Gateway Authenticated Command Injection (CVE-2019-3914)
A command injection vulnerability exists in Verizon Fios Quantum Gateway G1100 firmware. Successful exploitation of this vulnerability could result in the execution of arbitrary commands with root privileges...
Cisco RV325 < 1.4.2.22 Multiple Vulnerabilities
Binary data 700567.prm...
Spring Boot Actuator Command Execution Vulnerability
Actuators are one of the four main features proposed in Spring Boot to simplify Spring development. A command execution vulnerability exists in Spring Boot Actuator, which can be exploited by an attacker to execute arbitrary commands by constructing a malicious request...
The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to execute arbitrary commands.
The vulnerability of the Cisco IOS XE operating system’s web interface is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the run_command function in the Git distributed version control system allows a hacker to execute arbitrary commands.
The vulnerability of the runcommand programming interface in a distributed version control system like Git is related to insufficient cleaning of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
USN-3946-1 rssh vulnerabilities
It was discovered that rssh incorrectly handled certain command-line arguments and environment variables. An authenticated user could bypass rssh's command restrictions, allowing an attacker to run arbitrary commands...
USN-3946-1: rssh vulnerabilities
It was discovered that rssh incorrectly handled certain command-line arguments and environment variables. An authenticated user could bypass rssh's command restrictions, allowing an attacker to run arbitrary commands...
CVE-2018-19300
On D-Link DAP-1530 A1 before firmware version 1.06b01, DAP-1610 A1 before firmware version 1.06b01, DWR-111 A1 before firmware version 1.02v02, DWR-116 A1 before firmware version 1.06b03, DWR-512 B1 before firmware version 2.02b01, DWR-711 A1 through firmware version 1.11, DWR-712 B1 before...
CVE-2019-3914
Remote command injection vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname...
Citrix SD-WAN Center Command Injection
The remote Citrix SD-WAN Center is affected by a remote command injection vulnerability due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP request, to execute arbitrary commands on the remote host with root...
Design/Logic Flaw
In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...