The vulnerability of the WD Arkeia data storage device allows a hacker to bypass authentication procedures or execute arbitrary commands.

The vulnerability of the WD Arkeia data storage device’s Arkeia feature is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures or execute arbitrary commands by sending specially crafted requests related to the...

CVE-2013-2208

tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP template file...

CVE-2011-5166

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the 1 USER, 2 PASS, 3 REIN, 4 QUIT, 5 PORT, 6 PASV, 7 TYPE, 8 STRU, 9 MODE, 10 RETR, 11 STOR, 12 APPE, 13 ALLO, 14 REST, 15 RNFR, 16 RNTO, 17 ABOR, 18 DELE, 19 CWD, 20 LIST, ...

CVE-2012-2562

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a 1 LOCATE, 2 TRACK, 3 UPDATECFG, 4 UPDATEACCT, 5 STAT, 6 TERM, or 7 WIPE command via an SMS message...

CVE-2008-7070

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...

dbdisplay-exec.txt

...:::::dbdisplay.plall versions Remote execut Vulnerability::::.... Virangar Security Team www.virangar.org -------- Discoverd By : black.shadowes & hadihadi special tnx to:MR.nosrati,MR.hesy,satan,IGI,zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world...

vbPortal 3.0.2 < 3.6.0 b1 - 'cookie' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on this works with magicquotesgpc=Off\r\n"; echo "dork: Portal By vbPortal Version 3.5.0 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0;...

AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution

!/usr/bin/perl ---GHC--------------------------------- Remote command execution exploit Product: Advanced Web Statistics 6.0 - 6.2 URL:http://awstats.sourceforge.net Greets & respects to our friends: 1dt.w0lf and all rst.void.ru Special greets 2 d0G4 & cr0n for link on bugtraq...

CVE-2004-1114

Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777...

CVE-2001-0899

CVE-2001-0899 concerns the PHP-Nuke Network Tools Add-On. The connected sources confirm that the vulnerability arises in Network Tools 0.2 for PHP-Nuke, where the remote attacker can execute commands on the server via shell metacharacters placed in the $hostinput variable. This leads to arbitrary...

squirrelmail 1.2.5 email user can execute command

email user can append $THEME variable through cookies ---------------- start sq125x --------------------- !/bin/bash squirrelmail-1.2.5 remote execution by pokleyzz http://www.inetd-secure.net usage : ./sq125x themecount username password url command example : ./sq125x 2 pokley 123456...