Lucene search
+L

15574 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/11 12:00 a.m.14 views

The vulnerability of ASUS RT-AC86 Wi-Fi router’s microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system. This allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of ASUS RT-AC86 Wi-Fi routers’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cause service...

9CVSS8.5AI score0.01233EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/07/10 4:15 p.m.9 views

CVE-2021-42081

An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC...

7.2CVSS6AI score0.0123EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/07/10 6:29 a.m.11 views

CVE-2021-42081 Authenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.355

An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC...

9.1CVSS7.2AI score0.0123EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/07/10 6:29 a.m.36 views

CVE-2021-4406 Authenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others

An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC go to the alert manager open the ITSM tab add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss ' whitespaces are tab characters click add click apply create a test alert The tes...

9.1CVSS9.6AI score0.00964EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/07/10 6:29 a.m.17 views

CVE-2021-4406 Authenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others

An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC go to the alert manager open the ITSM tab add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss ' whitespaces are tab characters click add click apply create a test alert The tes...

9.1CVSS6.6AI score0.00964EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/10 12:00 a.m.11 views

PT-2023-12396 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an authenticated administrator to remotely execute arbitrary shell commands via the API. This could potentially lead to unauthorized access and control of the syste...

9.1CVSS7.7AI score0.0123EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/07/10 12:00 a.m.13 views

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS exists because measures to neutralize the special elements used in the operating system’s command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7.5AI score0.0136EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2023/07/07 12:00 a.m.337 views

DaillyTools Remote Command Execution

==================================================================================================================================== | Title : DaillyTools v1 command execution Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit ...

7.1AI score
SaveExploits0
OSV
OSV
added 2023/07/06 3:15 p.m.9 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS5.8AI score0.49317EPSS
SaveExploits3References1
NVD
NVD
added 2023/07/06 3:15 p.m.33 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS8.9AI score0.49317EPSS
SaveExploits3References1
ATTACKERKB
ATTACKERKB
added 2023/07/06 3:15 p.m.11 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS7.4AI score0.49317EPSS
SaveExploits3References3
Prion
Prion
added 2023/07/06 3:15 p.m.25 views

Design/Logic Flaw

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

6.5CVSS8.8AI score0.49317EPSS
SaveExploits3References1Affected Software1
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.8 views

Nexxt Nebula 1200-AC 安全漏洞

The Nexxt Nebula 1200-AC is a wireless router from Nexxt USA. A security vulnerability exists in the Nexxt Nebula 1200-AC version 15.03.06.60, which originates from using the HTTPD service to enable TELNET to bypass authentication and command execution...

9.8CVSS8.5AI score0.02556EPSS
SaveExploits2References3
Redos
Redos
added 2023/07/06 12:00 a.m.12 views

ROS-2-1741

2.1741 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

10CVSS9.9AI score0.06132EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/07/06 12:00 a.m.44 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

9.1AI score0.49317EPSS
SaveExploits3References1
BDU FSTEC
BDU FSTEC
added 2023/07/06 12:00 a.m.10 views

The vulnerability of the sub_40A774 function in TP-Link TL-WPA8630P microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the sub40A774 function in TP-Link TL-WPA8630P microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.0241EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/06 12:00 a.m.13 views

The vulnerability of the sub_40A80C function in TP-Link TL-WPA8630P microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the sub40A80C function in TP-Link TL-WPA8630P microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.0241EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/07/06 12:00 a.m.122 views

CVE-2023-36969

CMS Made Simple v2.2.17 (and affected

8.8CVSS8.8AI score0.49317EPSS
SaveExploits3References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.19 views

PT-2023-25757 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.17 Description: The issue allows for Remote Command Execution via the File Upload Function. Recommendations: For CMS Made Simple version 2.2.17, update to a version that fixes this issue...

8.8CVSS8.8AI score0.49317EPSS
SaveExploits3References3
Redos
Redos
added 2023/07/06 12:00 a.m.8 views

ROS-2-2174

2.2174 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

10CVSS10AI score0.06132EPSS
SaveExploits0
Rows per page
Query Builder