CVE-2023-27759

An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file...

CVE-2023-25356

CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leverage...

PT-2023-21327 · Wondershare · Wondershare Filmora

Name of the Vulnerable Software and Affected Versions: Wondershare Filmora version 12.0.9 Description: An issue in Wondershare Filmora allows a remote attacker to execute arbitrary commands via the filmora setup full846.exe. Recommendations: For version 12.0.9, consider removing or restricting...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare MobileTrans that originates from a command that can be executed remotely via mobiletranssetupfull5793.exe...

CVE-2023-27761

An issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker to execute arbitrary commands via the uniconverter1464bitsetupfull14204.exe file...

CVE-2023-27766

An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireelsetupfull9589.exe file...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Dr. Fone that originates from a command that can be executed remotely via drfonesetupfull3360.exe...

PT-2023-21329 · Wondershare · Democreator

Name of the Vulnerable Software and Affected Versions: Wondershare DemoCreator version 6.0.0 Description: An issue in DemoCreator allows a remote attacker to execute arbitrary commands via the democreator setup full7743.exe file. Recommendations: For version 6.0.0, consider removing or restrictin...

CVE-2023-25356

CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leverage...

CVE-2023-27764

An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairitsetupfull5913.exe file...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Creative Centerr that originates from a command that can be executed remotely via wondershareCCsetupfull10819.exe...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Repairit that originates from a command that can be executed remotely via repairitsetupfull5913.exe...

PT-2023-20792 · Unknown · Uptime Kuma

Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions 1.19.6 and before Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the "status page.js" endpoint...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare PDF Reader that originates from a command that can be executed remotely via pdfreadersetupfull13143.exe...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare PDFelement that originates from a command that can be executed remotely via pdfelement-prosetupfull5239.exe...

PT-2023-21335 · Wondershare · Wondershare Pdfelement

Name of the Vulnerable Software and Affected Versions: Wondershare PDFelement version 9.1.1 Description: An issue in Wondershare PDFelement allows a remote attacker to execute arbitrary commands via the pdfelement-pro setup full5239.exe file. Recommendations: For Wondershare PDFelement version...

PT-2023-21337 · Wondershare · Wondershare Edraw-Max

Name of the Vulnerable Software and Affected Versions: Wondershare Edraw-max version 12.0.4 Description: An issue in Wondershare Edraw-max allows a remote attacker to execute arbitrary commands via the edraw-max setup full5371.exe file. Recommendations: For version 12.0.4, consider removing or...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

XCMS 1.83 Remote Command Execution

Exploit Title: XCMS v1.83 - Remote Command Execution RCE Author: Onurcan Email: [email protected] Site: ihteam.net Script Download : http://www.xcms.it Date: 26/12/2022 The xcms's footerthat is in "/dati/generali/footer.dtb" is included in each page of the xcms. Taking "home.php" for example...

HTTP File Server <2.3c - Remote Command Execution

HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...