CVE-2025-1229 olajowon Loggrove page os command injection

A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The...

CVE-2025-1229

CVE-2025-1229 affects olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. The vulnerability is an OS command injection in the path parameter of /read/?page=1&logfile=eee&match=, which can be exploited remotely. The product uses no versioning, so affected/unaffected releases aren’t s...

CVE-2024-8684

OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to execute OS commands on the device via the ‘php/dal.php’ endpoint, in the ‘arrSaveConfig’ parameter...

CVE-2024-50569

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

CVE-2024-40584

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiManager version 7.4.0...

CVE-2024-50567

An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-40584

CVE-2024-40584 concerns an OS Command Injection in Fortinet products due to improper neutralization of special elements in OS commands. Affected are FortiAnalyzer (versions 7.4.0–7.4.3, 7.2.0–7.2.5, 7.0.0–7.0.13, 6.4.0–6.4.15, 6.2.2–6.2.13), FortiManager (same version ranges), FortiAnalyzer BigDa...

CVE-2024-50567

An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

CVE-2024-50567

An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

CVE-2024-50567

CVE-2024-50567 is a Fortinet FortiWeb OS command injection vulnerability affecting FortiWeb versions 7.4.0 through 7.6.0. The issue arises from improper neutralization of special elements used in OS commands, allowing an attacker to execute arbitrary commands or code via crafted input. The vulner...

CVE-2024-50569

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...

CVE-2024-50569

CVE-2024-50569 concerns Fortinet FortiWeb OS command injection in FortiWeb 7.0.0–7.6.0 due to improper neutralization of special elements in OS commands. The vulnerability enables an attacker to run arbitrary code via crafted input. Connected sources corroborate affected versions (7.0.0–7.6.0) an...

EUVD-2025-4980

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

PT-2025-6263 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.0.0 through 7.6.0 Description: The issue exists due to the improper neutralization of special elements used in an os command, which can be exploited by an attacker to execute unauthorized code or commands via crafted input...

PT-2025-6241 · Ivanti · Ivanti Csa

Name of the Vulnerable Software and Affected Versions: Ivanti CSA versions prior to 5.0.5 Description: The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution through OS command injection in the admin web console. Recommendations: For Ivanti CSA...

PT-2025-6238 · Ivanti · Ivanti Csa

Name of the Vulnerable Software and Affected Versions: Ivanti CSA versions prior to 5.0.5 Description: The issue allows a remote unauthenticated attacker to access restricted functionality due to path traversal. There is also a mention of OS command injection in the admin web console, which can...