Command injection

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability...

CVE-2023-44221

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user, potentially leading to OS Command Injection Vulnerability...

CVE-2023-44221

The CVE-2023-44221 entry concerns SonicWall SMA100 appliances with the SSL-VPN management interface. A vulnerability in improper neutralization of special elements allows a remote authenticated attacker with administrative privileges to inject arbitrary commands as a nobody user, enabling OS Comm...

CVE-2023-44221

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a ‘nobody’ user, potentially leading to OS Command Injection Vulnerability. Recent assessments: Assessed...

CVE-2023-44291

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application...

CVE-2023-44291

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application...

CVE-2023-44291

Dell PowerProtect Data Manager DM5500 (v5.14.0.0) is affected by an OS command injection in the PPOE component. The root cause is improper neutralization of special characters in commands, allowing a remote, high-privilege attacker with network access to run arbitrary OS commands on the underlyin...

PT-2023-9076 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions prior to 10.2.1.10-62sv Description: The issue is related to the improper neutralization of special elements in the SMA100 SSL-VPN management interface, allowing a remote authenticated attacker with administrative...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

CVE-2023-3741

The CVE-2023-3741 entry describes an OS command injection vulnerability in NEC Platforms DT900 and DT900S Series IP phones (all versions), allowing an attacker to execute arbitrary commands on the device. According to connected sources, exploitation is possible over the network with no privileges...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

INEA ME RTU Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-35762)

Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system OS command injection, which could allow remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

CVE-2023-6201

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection.This issue affects Panorama: before 8.0...

CVE-2023-6201

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...

CVE-2023-6201

The CVE-2023-6201 issue is a Command Injection vulnerability in Univera Computer System Panorama. Affected software: Panorama before version 8.0. Root cause: Improper neutralization of special elements used in OS commands, enabling injection. Impact described in sources: severities align with hig...

CVE-2023-6201 Command Injection in Univera Panorama Framework

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...

CVE-2023-6201 Command Injection in Univera Panorama Framework

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

CVE-2011-2523-poc This is a python3 script to exploit the CVE...

PT-2023-32565

Name of the Vulnerable Software and Affected Versions Univera Computer System Panorama versions prior to 8.0 Description The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This means...