Command injection

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php...

CVE-2023-23333

SolarView Compact 6.00 is affected by an OS command injection via downloader.php, allowing remote code execution. The vulnerability arises from an insecure file parameter in downloader.php that can bypass internal restrictions. Public exploit templates (including Metasploit module) describe obtai...

CVE-2021-23016: Undefined Security Weakness

On BIG-IP APM versions 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, and all versions of 16.0.x, 12.1.x, and 11.6.x, an attacker may be able to bypass APM's internal restrictions and retrieve static content that is hosted within APM by sending specifically crafted requests t...

PT-2021-15343

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 11.6.x BIG-IP APM versions 12.1.x BIG-IP APM versions 13.1.x before 13.1.4 BIG-IP APM versions 14.1.x before 14.1.4.1 BIG-IP APM versions 15.1.x before 15.1.3 BIG-IP APM versions 16.0.x Description An issue allows an attack...