Synology Router Manager 操作系统命令注入漏洞

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. in China. An operating system command injection vulnerability exists in Synology Router Manager SRM before version 1.2.5-8227-6. A man-in-the-middle attacker can exploit this vulnerability t...

DynoRoot DHCP Command Injection

Exploit Title: DynoRoot DHCP - Client Command Injection Date: 2018-05-18 Exploit Author: Kevin Kirsche Exploit Repository: https://github.com/kkirsche/CVE-2018-1111 Exploit Discoverer: Felix Wilhelm Vendor Homepage: https://www.redhat.com/ Version: RHEL 6.x / 7.x and CentOS 6.x/7.x Tested on:...

dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script

A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root...