Lucene search
K

2571 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/05 4:13 p.m.3 views

CVE-2020-37123

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters...

9.8CVSS6.6AI score0.15719EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/05 4:13 p.m.3 views

CVE-2020-37123 Pinger 1.0 - Remote Code Execution

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters...

9.8CVSS6.6AI score0.15719EPSS
Exploits0References3
EUVD
EUVD
added 2026/02/05 4:13 p.m.3 views

EUVD-2020-31045

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters...

9.8CVSS6.6AI score0.15719EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/05 4:13 p.m.209 views

CVE-2020-37123 Pinger 1.0 - Remote Code Execution

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters...

9.8CVSS0.15719EPSS
Exploits0References3
CVE
CVE
added 2026/02/05 4:13 p.m.13 views

CVE-2020-37123

CVE-2020-37123 affects Pinger 1.0 and describes a remote code execution vulnerability. The issue arises from unsanitized input in ping.php, enabling an attacker to inject shell commands, write arbitrary PHP files, and execute system commands by appending shell metacharacters. The entry indicates ...

9.8CVSS6.6AI score0.15719EPSS
In wildExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/05 12:0 a.m.2 views

PT-2026-6567

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters...

9.8CVSS6.7AI score0.15719EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.3 views

pinger 操作系统命令注入漏洞

Pinger is a web monitoring application developed by wcchandler. Version 1.0 of Pinger contains an operating system command injection vulnerability. This vulnerability stems from uncleaned inputs for the ping and socket parameters, which may allow attackers to inject shell commands and execute...

9.8CVSS6AI score0.15719EPSS
Exploits0References3
AstraLinux
AstraLinux
added 2026/01/27 5:1 a.m.2 views

Astra Linux - уязвимость в zabbix

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure...

9.9CVSS6.3AI score0.00497EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/23 2:57 a.m.25 views

CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...

7.2CVSS0.00383EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:57 a.m.12 views

CVE-2026-0779

The CVE-2026-0779 vulnerability affects ALGO 8180 IP Audio Alerter devices. It stems from the web UI’s improper validation of a user-supplied string used to execute a system call, enabling remote code execution in the device context. Exploitation requires authentication and is possible over the n...

8.8CVSS6.5AI score0.00383EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 2:57 a.m.2 views

CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...

7.2CVSS6.5AI score0.00383EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000678)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000678 advisory. The pingrecvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local...

4.6CVSS7.9AI score0.00042EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000672 advisory. Integer overflow in the pinginitsock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service use-after-free an...

6.9CVSS7AI score0.00299EPSS
Exploits7References12
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001639 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...

5.5CVSS6.5AI score0.00512EPSS
Exploits2References15
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000932)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000932 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allow...

4.9CVSS7.4AI score0.0304EPSS
Exploits6References31
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003079 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...

5.5CVSS6.5AI score0.00512EPSS
Exploits2References15
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001995 advisory. The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attribute...

5.5CVSS6.6AI score0.00065EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002366 advisory. Integer overflow in the pinginitsock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service use-after-free an...

6.9CVSS7AI score0.00299EPSS
Exploits7References12
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002697)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002697 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...

5.5CVSS6.5AI score0.00512EPSS
Exploits2References15
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.4 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002355 advisory. The pingrecvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local...

4.6CVSS7.9AI score0.00042EPSS
Exploits1References11
Rows per page
Query Builder