Tenda AC1206 Router Code Execution

The vulnerability of the functions ateTendamfgcheckusb and ateTendamfgcheckusb3 /goform/ate of the Tenda AC1206 router’s microprogramming software lies in the fact that the operation outputs outside the buffer in memory when processing the parameter arg. Exploiting this vulnerability allows a...

Western Digital MyCloud NAS Remote Command Injection Vulnerability

Western Digital MyCloud NAS is a personal cloud storage device. Western Digital MyCloud NAS version 2.11.142 suffers from a remote command injection vulnerability in /web/googleanalytics.php, which allows an attacker to execute arbitrary commands with root privileges via the arg parameter within...

CVE-2016-10108: Improper Neutralization of Special Elements used in a Command

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/googleanalytics.php URL via a modified arg parameter in the POST data...

CVE-2011-0261: Undefined Security Weakness

Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter...

PT-2011-2235

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter. This is related to an unspecified vulnerability in...