PT-2017-14505

Name of the Vulnerable Software and Affected Versions Cacti version 1.1.27 Description The issue allows remote authenticated administrators to execute arbitrary OS commands. This is achieved via the path rrdtool parameter in an "action=save" request to "settings.php". Recommendations For Cacti...

EulerOS 2.0 SP1 : git (EulerOS-SA-2017-1265)

According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support...

OrientDB Server 2.2.x <= 2.2.22 RCE Vulnerability

OrientDB does not enforce privilege requirements during SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:orientdb:orientdb";...

HPE System Management Homepage Arbitrary Command Execution Vulnerability (CNVD-2017-33362)

HPE System Management Homepage is a Web-based interface from Hewlett Packard Enterprise. An arbitrary command execution vulnerability exists in HPE System Management Homepage, which allows an attacker to submit a special request to execute arbitrary OS commands in an application context...

CVE-2017-10813

CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

PT-2017-11521

Name of the Vulnerable Software and Affected Versions CG-WLR300NM Firmware versions 1.90 and earlier Description The issue allows an attacker to execute arbitrary OS commands via unspecified vectors. Recommendations For CG-WLR300NM Firmware versions 1.90 and earlier, update to a version later tha...

CVE-2017-10813: Improper Neutralization of Special Elements used in an OS Command

CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

PT-2017-3002

Name of the Vulnerable Software and Affected Versions Git versions 2.10.5 and earlier, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 Description The issue is related to the use of unsafe Perl scripts to support subcommands such as cvsserver, allowing...

CVE-2017-14135

enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI...

Command injection

Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OIFwv7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mntping.cgi...

CVE-2017-14127

Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OIFwv7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mntping.cgi...

CVE-2017-14127

Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OIFwv7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mntping.cgi...

Mako Server v2.5, 2.6 OS Command Injection RCE

This module exploits a vulnerability found in Mako Server v2.5, 2.6. It's possible to inject arbitrary OS commands in the Mako Server tutorial page through a PUT request to save.lsp. Attacker input will be saved on the victims machine and can be executed by sending a GET request to manage.lsp...

CVE-2017-10832: Improper Neutralization of Special Elements used in an OS Command

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2017-10832

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

PT-2017-11540

Name of the Vulnerable Software and Affected Versions Dokodemo eye Smart HD SCR02HD Firmware versions 1.0.3.1000 and earlier Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For Firmware versions 1.0.3.1000 and earlier, update to a version later than...

PT-2017-11519

Name of the Vulnerable Software and Affected Versions Buffalo WCR-1166DS versions 1.30 and earlier Description The issue allows an attacker to execute arbitrary OS commands. Recommendations For Buffalo WCR-1166DS versions 1.30 and earlier, update to a version later than 1.30 to resolve the issue...

CVE-2017-10811: Improper Neutralization of Special Elements used in an OS Command

Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors...

PT-2017-9395

Name of the Vulnerable Software and Affected Versions GigaCC OFFICE versions 2.3 and earlier Description The issue allows remote attackers to execute arbitrary OS commands via specially crafted mail templates. Recommendations For GigaCC OFFICE versions 2.3 and earlier, update to a version later...

CVE-2017-2281: Improper Neutralization of Special Elements used in an OS Command

WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...