PT-2018-4545

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of input validation while processing the TZ PR CMD SAVE KEY command, which could lead to a buffer overread. This affects Android on various...

PT-2018-4520

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of buffer length validation in the pvr cmd handler function, which can lead to unauthorized access to secure memory. This affects Qualcomm...

CVE-2018-10083: Improper Limitation of a Pathname to a Restricted Directory

CMS Made Simple CMSMS through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter...

PT-2018-9668

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions through 2.2.7 Description: The issue concerns an arbitrary file deletion vulnerability in the admin dashboard. This occurs via directory traversal sequences in the val parameter within a 'cmd=del' request. The...

CVE-2014-3114

The EZPZ One Click Backup ezpz-one-click-backup plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php...

CVE-2014-3114: Improper Neutralization of Special Elements used in a Command

The EZPZ One Click Backup ezpz-one-click-backup plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php...

PT-2018-4209

Name of the Vulnerable Software and Affected Versions EZPZ One Click Backup plugin versions 12.03.10 and earlier Description The issue allows remote attackers to execute arbitrary commands. This is achieved via the cmd parameter to the "functions/ezpz-archive-cmd.php" endpoint. Recommendations Fo...

CVE-2017-13281

In avrcparsbrowsingcmd of avrcparstg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1...

PT-2018-5571

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing bounds check in the nfc hci cmd received function of core.c, which could lead to a local escalation of privilege in the kernel. This can be exploited without additional execution...

CVE-2018-9156

AXIS P1354 IP camera (Firmware 5.90.1.1) is affected by CVE-2018-9156 due to an upload page that does not verify file types, enabling a webshell upload via fileUpload.shtml for a custom .shtml file. The shell can be interpreted by Apache mod_include (

ESXi Detection via VMWare Tools CMD execution

Binary data vmwareesxidetection.nbin...

UBUNTU-CVE-2018-8763

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=renameform URI...

CVE-2018-8763

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=renameform URI...

DEBIAN-CVE-2018-8763

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=renameform URI...

MikroTik RouterOS < 6.38.4 (x86) - Chimay Red Stack Clash Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/env python2 Mikrotik Chimay Red Stack Clash Exploit by wsxarcher based on BigNerd95 POC tested on RouterOS 6.38.4 x86 ASLR enabled on libs only DEP enabled import socket, time, sys, struct from pwn import import ropgadget...

CVE-2018-7736

In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZCBLOGSUBNAME parameter or ZCUPLOADFILETYPE parameter. NOTE: the software maintainer disputes that this is a vulnerability...

PT-2018-18247 · Z Blogphp · Z-Blogphp

Name of the Vulnerable Software and Affected Versions: Z-BlogPHP version 1.5.1.1740 Description: There is a reported issue in Z-BlogPHP where the cmd.php file is susceptible to XSS attacks via the ZC BLOG SUBNAME parameter or the ZC UPLOAD FILETYPE parameter. However, the software maintainer...

PT-2018-1156

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified QRD Android versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected versions not specified Description The issue is related to...

PT-2018-17831

Name of the Vulnerable Software and Affected Versions NAT32 version 2.2 Build 22284 Description A CSRF issue exists in the HTTPD component that can be exploited for Remote Code Execution in conjunction with XSS, specifically through the "/shell?cmd=" endpoint. Recommendations For NAT32 version 2....

PT-2018-17830

Name of the Vulnerable Software and Affected Versions NAT32 version 2.2 Build 22284 Description A XSS issue exists in the HTTPD component that can be exploited for Remote Code Execution in conjunction with CSRF, specifically through the /shell?cmd= endpoint. Recommendations For NAT32 version 2.2...