CVE-2022-24611: Undefined Security Weakness

Denial of Service DoS in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs...

PT-2021-27425

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 2 crash type. The crash state involves functions such as UA Array copy, copy noInit, and NodeId copy. ...

PT-2021-27432

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ crash. The crash state involves functions such as UA Array copy, copy noInit, and NodeId copy. No...

rConfig Code Execution Vulnerability

rConfig is an open source network configuration management utility . A code execution vulnerability exists in the search.crud.php script in rConfig version 3.9.5, which can be exploited by a remote attacker to execute arbitrary code on a system with the help of the 'nodeId' parameter...

CVE-2020-15715

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter...

CVE-2020-15715

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter...

Code injection

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter...

CVE-2020-15715

CVE-2020-15715 affects rConfig 3.9.5 and earlier. An authenticated remote attacker can execute arbitrary code due to an error in the search.crud.php script, exploitable via the nodeId parameter. Public sources indicate a fix in a subsequent release (rConfig 3.9.6); successful exploitation yields ...

CVE-2020-15715

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter...

CVE-2020-15715

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter...

PT-2020-14602

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.5 Description The issue is caused by an error in the search.crud.php script, allowing a remote authenticated attacker to execute arbitrary code on the system. The nodeId parameter can be exploited to achieve this...

CVE-2020-15715: Undefined Security Weakness

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter...

vBulletin 5.6.1 - 'nodeId' SQL Injection

Exploit Title: vBulletin 5.6.1 - 'nodeId' SQL Injection Date: 2020-05-15 Exploit Author: Photubias Vendor Advisory: 1 https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcementsaa/4440032-vbulletin-5-6-1-security-patch-level-1 Version: vBulletin v5.6.x prior to Patch Level 1...

rConfig Command Injection Vulnerability

rConfig is an open source network configuration management utility . A command injection vulnerability exists in rConfig versions prior to 3.9.5, which stems from the 'nodeId' parameter not being escaped and passed directly to the 'exec' function, which can be exploited to execute arbitrary...

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

CVE-2020-10879: Improper Neutralization of Special Elements used in an OS Command

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...

PT-2020-4763

Name of the Vulnerable Software and Affected Versions: rConfig versions prior to 3.9.5 Description: The issue is related to a lack of proper neutralization of special elements used in operating system commands. This can be exploited by a remote attacker using a specially crafted GET request,...