CVE-2020-8813

graphrealtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege...

CVE-2020-8813

The Cacti network monitoring tool (version 1.2.8 ) is vulnerable to Remote Code Execution (RCE) due to an issue in the graph_realtime.php file. An authenticated guest user with graph real-time privileges can execute arbitrary operating system commands by providing shell metacharacters within a co...

CVE-2020-8813

graphrealtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege...

CVE-2020-8813

graphrealtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege...

CVE-2020-6841

Summary: CVE-2020-6841 affects the D-Link DCH-M225 Wi‑Fi audio extender (versions 1.05b01 and earlier). The vulnerability arises in the spotifyConnect.php script where userName input is not properly neutralized, allowing an attacker to inject shell metacharacters and execute arbitrary OS commands...

CVE-2020-5524

CVE-2020-5524 affects NEC Aterm devices (WF1200C v1.2.1 and earlier; WG1200CR v1.2.1 and earlier; WG2600HS v1.3.2 and earlier). The flaw allows an attacker on the same network segment to run arbitrary OS commands with root privileges via the UPnP interface. Public sources in the connected documen...

CVE-2020-5525: Improper Neutralization of Special Elements used in an OS Command

Aterm series Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen...

PT-2020-20400

Name of the Vulnerable Software and Affected Versions TimeTools SC7105 version 1.0.007 TimeTools SC9205 version 1.0.007 TimeTools SC9705 version 1.0.007 TimeTools SR7110 version 1.0.007 TimeTools SR9210 version 1.0.007 TimeTools SR9750 version 1.0.007 TimeTools SR9850 version 1.0.007 TimeTools T1...

Design/Logic Flaw

Gocloud S2AWL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7.16528, S3A 4.3.0.16572, and ISP3000 4.3.0.17190 devices allows remote attackers to execute arbitrary OS commands via shell metacharacters in a ping operation, as demonstrated by the...

CVE-2020-8946

Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/syslogclean.cgi log3gtype parameter...

Design/Logic Flaw

Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/syslogclean.cgi log3gtype parameter...

CVE-2020-8947

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

CVE-2020-8947

CVE-2020-8947 affects Artica Pandora FMS 7.0. The vulnerability lets remote attackers execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nf_live_view parameters ip_dst, dst_port, or src_port (functions_netflow.php). Root cause appears to be unsafely handling...

CVE-2020-8946

Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/syslogclean.cgi log3gtype parameter...

CVE-2020-8947: Improper Neutralization of Special Elements used in an OS Command

functionsnetflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nfliveview ipdst, dstport, or srcport parameter, a different vulnerability than CVE-2019-20224...

Design/Logic Flaw

Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu, as demonstrated by ping...

CVE-2020-6760

Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu, as demonstrated by ping...

CVE-2020-6760

CVE-2020-6760 affects the Schmid ZI 620 V400 VPN 090 router. The vulnerability allows an attacker to execute OS commands as root by submitting shell metacharacters to an entry on the SSH subcommand menu, demonstrated by an example like ping. This is a network-based injection risk, with the impact...

PT-2020-19216

Name of the Vulnerable Software and Affected Versions Schmid ZI 620 V400 VPN 090 routers Description The issue allows an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu. This can be demonstrated by using the ping command. Recommendations For...

CVE-2015-3611: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier via unspecified vectors, which could let a malicious user run systems commands when executing a report...