8502 matches found
Cambium Networks cnMaestro
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Cambium Networks Equipment: cnMaestro Vulnerabilities: OS Command Injection, SQL Injection, Path Traversal, Use of Potentially Dangerous Function 2. RISK EVALUATION Successful exploitation of these...
Tenda HG6 v3.3.0 - Remote Command Injection
Exploit Title: Tenda HG6 v3.3.0 - Remote Command Injection Exploit Author: LiquidWorm Tenda HG6 v3.3.0 Remote Command Injection Vulnerability Vendor: Tenda Technology Co.,Ltd. Product web page: https://www.tendacn.com https://www.tendacn.com/product/HG6.html Affected version: Firmware version:...
InHand Networks InRouter302 console factory OS command injection vulnerability
Summary An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions InHand...
InHand Networks InRouter302 httpd wlscan_ASP OS command injection vulnerability
Summary An OS command injection vulnerability exists in the httpd wlscanASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Tested...
InHand Networks InRouter302 console infactory_port OS command injection vulnerability
Summary An OS command injection vulnerability exists in the console infactoryport functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability. Test...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to OS command injection (CVE-2022-22454)
Summary An OS command injection vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2022-22454 DESCRIPTION: IBM InfoSphere Information Server could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially...
JVN#96561229: Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM
FUJITSU Network IPCOM provided by FUJITSU LIMITED is an integrated network appliance. Operation management interface used to operate FUJITSU Network IPCOM contains multiple vulnerabilities listed below. OS command injection in the web console CWE-78 - CVE-2022-29516 Version| Vector| Score...
Command injection
Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via setroute called by doSystemCmdroute...
CVE-2022-29592
Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via setroute called by doSystemCmdroute...
CVE-2022-29592
CVE-2022-29592 affects Tenda TX9 Pro firmware 22.03.02.10. The vulnerability is an OS command injection in the set_route call (triggered by doSystemCmd_route) that can be exploited by an attacker over the network with no authentication or user interaction. The CVSS data indicates a critical impac...
Command injection
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...
CVE-2021-41739
The CVE-2021-41739 issue affects Artica Proxy 4.30.000000, where an OS Command Injection is possible via cyrus.events.php using the GET parameter logs and the POST parameter rp. Multiple connected sources confirm the vulnerability and describe the root cause as lack of input filtering/escaping on...
Command injection
An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files...
CVE-2022-27903
The CVE-2022-27903 entry describes an OS Command Injection in Eve-NG’s configuration parser affecting Eve-NG Professional up to 4.0.1-65 and Eve-NG Community up to 2.0.3-112. The vulnerability allows a remote authenticated attacker to run commands as root by editing virtualization command paramet...
Tenda HG6 3.3.0 Remote Command Injection Vulnerability
Tenda HG6 version 3.3.0 suffers from a remote command injection vulnerability. It can be exploited to inject and execute arbitrary shell commands through the pingAddr and traceAddr HTTP POST parameters in formPing, formPing6, formTracert and formTracert6 interfaces. Tenda HG6 v3.3.0 Remote Comman...
Tenda HG6 3.3.0 Remote Command Injection
Tenda HG6 v3.3.0 Remote Command Injection Vulnerability Vendor: Tenda Technology Co.,Ltd. Product web page: https://www.tendacn.com https://www.tendacn.com/product/HG6.html Affected version: Firmware version: 3.3.0-210926 Software version: v1.1.0 Hardware Version: v1.0 Check Version:...
Yokogawa CENTUM and ProSafe-RS
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Yokogawa Equipment: CENTUM and ProSafe-RS Vulnerabilities: OS Command Injection, Improper Authentication, NULL Pointer Dereference, Improper Input Validation, Resource Management Errors 2. RISK...
Tenda HG6 v3.3.0 Remote Command Injection Vulnerability
Summary HG6 is an intelligent routing passive optical network terminal in Tenda FTTH solution. HG6 provides 4 LAN ports1GE,3FE, a voice port to meet users' requirements for enjoying the Internet, HD IPTV and VoIP multi-service applications. Description The application suffers from an authenticate...
D-Link DIR-823-Pro 操作系统命令注入漏洞
The D-Link DIR-823-Pro is a router from China-based AUO D-Link. The D-Link DIR-823-Pro version 1.0.2 suffers from an operating system command injection vulnerability that originates from the inclusion of a command injection vulnerability in the function SetNTPserverSeting. An attacker could explo...
