15767 matches found
PT-2022-4622 · Centrecom · Centrecom Ar260S V2
Name of the Vulnerable Software and Affected Versions: CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 Description: The issue is related to an OS command injection vulnerability in the telnet function, allowing a remote authenticated attacker to execute arbitrary OS commands. This is due...
WatchGuard XTM Firebox Unauthenticated Remote Command Execution
This module exploits a buffer overflow at the administration interface 8080 or 4117 of WatchGuard Firebox and XTM appliances which is built from a cherrypy python backend sending XML-RPC requests to a C binary called wgagent using pre-authentication endpoint /agent/login. This vulnerability impac...
PT-2022-7699
Name of the Vulnerable Software and Affected Versions D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description The issue is related to the hnap main function of the D-Link GO-RT-AC750 router's firmware, which fails to neutralize special elements used in an...
The vulnerability of the command-line interface (CLI) of the networking operating system FXOS allows a attacker to execute arbitrary commands with root privileges.
The vulnerability of the command-line interface CLI of the networking operating system FXOS exists because measures to neutralize the special elements used in the operating system’s commands have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
The vulnerability of the XMLRPC API interface of the Movable Type content management system allows attackers to execute arbitrary commands.
The vulnerability of the XMLRPC API interface of the Movable Type content management system is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the mySCADA myPRO system for visualizing and controlling industrial processes, related to the lack of measures for cleaning input data, allows a intruder to execute arbitrary commands.
The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
GitLab: Remote Command Execution via Github import
Summary This is very similar to https://about.gitlab.com/releases/2022/08/22/critical-security-release-gitlab-15-3-1-released/Remote%20Command%20Execution%20via%20Github%20import and allows arbitrary redis commands to be injected when imported a GitHub repository. When importing a GitHub repo the...
GitLab 11.3.4 < 15.1.5, 15.2.x < 15.2.3, 15.3.x < 15.3.1 RCE Vulnerability
GitLab is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; ...
CVE-2022-35733
Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier allows a remote unauthenticated attacker to execute an arbitrary OS...
Tenda AC18 Remote Command Execution Vulnerability
Tenda AC18 is a router from Tenda, a Chinese company. Tenda AC18 is vulnerable to remote command execution, which can be exploited by attackers to execute arbitrary commands on the system...
Zengenti Contensis Classic 授权问题漏洞
Zengenti Contensis Classic is a content management system from Zengenti UK. A security vulnerability exists in Zengenti Contensis Classic prior to version 15.2.1.79, which stems from a file upload wizard that fails to properly check if a user has been authenticated. The vulnerability can be...
PT-2022-6319 · Zyxel · Zyxel Nwa110Ax
Name of the Vulnerable Software and Affected Versions: Zyxel NWA110AX versions prior to 6.50ABTG.0C0 Description: The issue is related to an improper check for unusual conditions in the firmware, which could allow a LAN attacker to cause a temporary denial-of-service DoS by sending crafted VLAN...
PT-2022-4366
Name of the Vulnerable Software and Affected Versions UNIMO digital video recorders versions v1.0.20.13 and earlier UNIMO digital video recorders versions v2.0.20.13 and earlier Description The issue is related to the absence of authentication for a critical function in the firmware of UNIMO...
UNIMO Technology Digital Video Recorder 访问控制错误漏洞
UNIMO Technology Digital Video Recorder is a player from UNIMO Technology. UNIMO Technology Digital Video Recorder suffers from an Access Control Error vulnerability that stems from a lack of authentication for critical functions. A remote attacker could use this vulnerability to execute arbitrar...
The vulnerability in the web interface of Cisco IOS XE allows a hacker to inject commands into the base operating system with root privileges.
The vulnerability of Cisco IOS XE web interfaces exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject commands into the base operating system with root privileges, as a result of sending...
PT-2022-7224 · Proscend · Proscend M330-W +7
Name of the Vulnerable Software and Affected Versions: Proscend M330-w versions Proscend M330-W5 versions Proscend M350-5G versions Proscend M350-W5G versions Proscend M350-6 versions Proscend M350-W6 versions Proscend M301-G versions Proscend M301-GW versions Proscend ICR 111WG versions...
CVE-2022-35201
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...
CVE-2022-35201
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...
