2793 matches found
PT-2026-6567
Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters...
Astra Linux – Vulnerability in Zabbix
An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters allowed this user to execute arbitrary code via the Ping script, thereby compromising the infrastructure...
CVE-2026-0779
The CVE-2026-0779 vulnerability affects ALGO 8180 IP Audio Alerter devices. It stems from the web UI’s improper validation of a user-supplied string used to execute a system call, enabling remote code execution in the device context. Exploitation requires authentication and is possible over the n...
CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability
ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...
CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability
ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000678)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000678 advisory. The pingrecvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000672)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000672 advisory. Integer overflow in the pinginitsock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service use-after-free an...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000932)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000932 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allow...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001639)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001639 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003079)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003079 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002355)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002355 advisory. The pingrecvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002366)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002366 advisory. Integer overflow in the pinginitsock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service use-after-free an...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001995)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001995 advisory. The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attribute...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002697)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002697 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...
The vulnerability of the ping function in the iputils utility, which allows a hacker to cause a service failure
The vulnerability of the ping function in the iputils utility is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure using a specially created ICMP Echo Reply packet...
CVE-2018-4065
An exploitable cross-site scripting vulnerability exists in the ACEManager pingresult.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP ping request can cause reflected javascript code execution, resulting in the execution of javascript code running on the...
CVE-2022-38531
FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function...
CVE-2022-37661
SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution RCE via the ping host feature...
CVE-2020-12246
Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...