16035 matches found
CVE-2022-38535
TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg function...
CVE-2022-38534
CVE-2022-38534 affects TOTOLINK-720R v4.1.5cu.374 and is a remote code execution vulnerability exploitable via the setdiagnosicfg function. The issue is confirmed across multiple sources (e.g., PT-2022-24441) and Red Hat’s security advisory links the RCE to the same function. Exploitation could a...
Remote code execution
There is a remote code execution RCE vulnerability in Tenhot TWS-100 V4.0-201809201424 router device. It is necessary to know that the device account password is allowed to escape the execution system command through the network tools in the network diagnostic component...
CVE-2022-37861
There is a remote code execution RCE vulnerability in Tenhot TWS-100 V4.0-201809201424 router device. It is necessary to know that the device account password is allowed to escape the execution system command through the network tools in the network diagnostic component...
Exploit for Path Traversal in Apache Http_Server
It is an exploit module targeting Apache Log4j. The target produ...
CVE-2022-37861: Undefined Security Weakness
There is a remote code execution RCE vulnerability in Tenhot TWS-100 V4.0-201809201424 router device. It is necessary to know that the device account password is allowed to escape the execution system command through the network tools in the network diagnostic component...
CVE-2022-40663: Out-of-bounds Read
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
Adobe Photoshop Multiple Code Execution Vulnerabilities (APSB21-68) - Windows
Adobe Photoshop is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-37661
SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution RCE via the ping host feature...
Update now! Microsoft patches two zero-days
The Microsoft September 2022 Patch Tuesday includes fixes for two publicly disclosed zero-day vulnerabilities, one of which is known to be actively exploited. Five of the 60+ security vulnerabilities were rated as "Critical", and 57 as important. Two vulnerabilities qualify as zero-days, with one...
CVE-2022-37140
PayMoney 3.3 is vulnerable to Client Side Remote Code Execution RCE. The vulnerability exists on the reply ticket function and upload the malicious file. A calculator will open when the victim who download the file open the RTF file...
CVE-2022-37140
CVE-2022-37140 affects PayMoney 3.3. The vulnerability is a Client-Side Remote Code Execution (RCE) in the reply ticket function through uploading a malicious file; when an affected user opens the crafted RTF, a calculator is launched. Multiple sources (NVD, Red Hat, CVE lists) describe this entr...
CVE-2022-36667
CVE-2022-36667 affects Garage Management System 1.0. The Red Hat entry and related sources state the issue as a Remote Code Execution due to lack of filtering in the file upload function, enabling an attacker to upload a PHP reverse shell during parts addition to gain RCE. No exploitation status ...
CVE-2022-36667
Garage Management System 1.0 is vulnerable to the Remote Code Execution RCE due to the lack of filtering from the file upload function. The vulnerability exist during adding parts and from the upload function, the attacker can upload PHP Reverse Shell straight away to gain RCE...
CVE-2022-37661
SmartRG SR506n (version 2.5.15) and SR510n (version 2.6.13) routers are vulnerable to Remote Code Execution (RCE) via a command injection flaw in the ping host feature. A remote attacker can exploit this to execute arbitrary commands on the affected system. Proof-of-concept exploits are available...
CVE-2022-37190
CuppaCMS 1.0 is affected by a Remote Code Execution (RCE) vulnerability. An authenticated user can control both action and function parameters in the /api/index.php endpoint, enabling arbitrary code execution on the affected system. The NVD entry and the Nuclei template corroborate this RCE scena...
CVE-2022-37190
CuppaCMS 1.0 is vulnerable to Remote Code Execution RCE. An authenticated user can control both parameters action and function from "/api/index.php...
Patch Tuesday - September 2022
This month’s Patch Tuesday is on the lighter side, with 79 CVEs being fixed by Microsoft including 16 CVEs affecting Chromium, used by their Edge browser, that were already available. One zero-day was announced: CVE-2022-37969 is an elevation of privilege vulnerability affecting the Log File Syst...
