CVE-2022-25064

CVE-2022-25064 Questo script sfrutta una vulnerabilità di OS Command Injection nel router TPLink WR840N, utilizzando la funzione configure del protocollo IPv6...

CVE-2019-9194-elFinder-Command-Injection-PoC

CVE-2019-9194 — Iniezione di comandi in elFinder PoC Vulnerabilità di iniezione di comandi in elFinder = 2.1.47 tramite il componente connettore PHP. Consente l'esecuzione remota di codice non autenticata come utente del server web. Come funziona Carica un JPEG valido con un nome file malevolo...

PIL-CVE-2017-8291

Esecuzione remota di comandi in Python PIL/Pillow GhostButt / CVE-2017-8291 Versione cinese Python PIL Pillow è una popolare libreria di elaborazione delle immagini per Python. Supporta vari formati di immagine e offre potenti capacità di manipolazione delle immagini. Il modulo Python di...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox ist eine fortschrittliche Bedrohungsschutzlösung, die isolierte Umgebungen schafft, um verdächtige Dateien, URLs und Netzwerkverkehr auf schädliches Verhalten zu analysieren...

CVE-2024-6330

CVE-2024-6330 GEO my WordPress = 4.5.0.1 - Inclusione di File Locale non autenticata Descrizione Il plugin GEO my WP per WordPress è vulnerabile all'Inclusione di File Locale in tutte le versioni fino alla 4.5.0.1 inclusa tramite il parametro 'forminfowindowtemplatecontentpath'. Ciò consente a...

CVE-2021-31760

..| CVE-2021-31760 |.. Beschreibung : Ausnutzen eines Cross-Site-Request-Forgery-Angriffs CSRF, um eine Remote Command Execution RCE über die Funktion der laufenden Prozesse von Webmin zu erreichen Getestete Version : Webmin 1.973 neueste Version auf GitHub 07/03/2021 Angriffstyp: Remote...

sunflower_exp

CVE-2022-10270 Versioni interessate: Sunflower Personal Edition Windows --thread numero di thread durante la scansione numero di thread predefinito: 100 --help Aiuto sunflowerpocexp.py strumento di verifica e scansione delle vulnerabilità Rilevamento delle porte: eg: python sunflowerpocexp.py...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – Vulnerabilità di Iniezione Comandi in OpenSSH SCP Script di Rilevamento Informazioni CVE-2020-15778 è una vulnerabilità di iniezione comandi scoperta nell’utilità scp fornita da OpenSSH versioni ≤ 8.3p1. Il problema consente a un attaccante di eseguire comandi arbitrari sul siste...

MIPS-CVE-2014-9222

Dichiarazione di non responsabilità I tutorial sono solo a scopo informativo ed educativo. Credo che l'hacking etico, la sicurezza informatica e la cybersecurity dovrebbero essere argomenti familiari a chiunque utilizzi informazioni digitali e computer. Credo che sia impossibile difendersi dagli...

CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. id: CVE-2023-43177 info: name: CrushFTP 10.5.1 - Unauthenticated Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: critical description: | CrushFTP prior...

Apache Struts2 S2-052 - Remote Code Execution

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type of filtering, which can lead to remote code execution when deserializing XML payloads. id: CVE-2017-9805 info: name:...

Apache Solr DataImportHandler <8.2.0 - Remote Code Execution

Apache Solr is vulnerable to remote code execution vulnerabilities via the DataImportHandler, an optional but popular module to pull in data from databases and other sources. The module has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug...

Apache Solr <= 7.1 - XML Entity Injection

Apache Solr with Apache Lucene before 7.1 is susceptible to remote code execution by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external...

TerraMaster TOS < 4.2.30 Server Information Disclosure

TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure. id: CVE-2022-24990 info: name: TerraMaster TOS 4.2.30 Server Information Disclosure author: dwisiswant0 severity: high description: TerraMaster NAS devices running TOS prior to version 4.2.30 are...

Wavlink WN535K2/WN535K3 - OS Command Injection

Wavlink WN535K2 and WN535K3 routers are susceptible to OS command injection which affects unknown code in /cgi-bin/nightled.cgi via manipulation of the argument starthour. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised syste...

ManageEngine - Remote Command Execution

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security...

RaspAP 2.8.7 - Unauthenticated Command Injection

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfgid parameter in /ajax/openvpn/activateovpncfg.php and /ajax/openvpn/delovpncfg.php. id: CVE-2022-39986 info: name: RaspAP 2.8.7 - Unauthenticated Command Injectio...

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

Tenda Router AC11 - Remote Command Injection

Tenda Router AC11 is susceptible to remote command injection vulnerabilities in the web-based management interface that could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-31755 info: name: Tenda Router AC11 - Remote Comman...