CVE-2021-37718

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS...

CVE-2021-37724

CVE-2021-37724 affects ArubaOS (Aruba Mobility-Defined Networks). The vulnerability is a remote arbitrary command execution in ArubaOS software prior to versions 8.7.1.2, 8.6.0.8, 8.5.0.12, and 8.3.0.16. Siemens/Red Hat and other linked sources corroborate ArubaOS command-injection family and adv...

CVE-2021-37718

CVE-2021-37718 (Aruba SD-WAN / ArubaOS) is a remote arbitrary command execution vulnerability. The vulnerability affects Aruba SD-WAN Software and Gateways and ArubaOS on several old releases, including Aruba Operating System Software versions prior to 8.6.0.4-2.2.0.6 and prior to 8.7.1.4, 8.6.0....

CVE-2020-7877

A buffer overflow issue was discovered in ZOOK solutionremote administration tool through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. This vulnerability allows the attacker to execute remote arbitrary command...

CVE-2020-7877

A buffer overflow issue was discovered in ZOOK solutionremote administration tool through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. This vulnerability allows the attacker to execute remote arbitrary command...

CVE-2020-7877

A buffer overflow issue was discovered in ZOOK solutionremote administration tool through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. This vulnerability allows the attacker to execute remote arbitrary command...

CVE-2021-37723

CVE-2021-37723 is a remote arbitrary command execution vulnerability in ArubaOS Mobility Conductor (and ArubaOS components) reported for versions prior to 8.7.1.2/8.6.0.8/8.5.0.12/8.3.0.16, with patches released in ArubaOS. The issue is a command injection vulnerability affecting ArubaOS, leading...

The vulnerability of the HTTP interface of Grandstream UCM6200 microprogrammed router software allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the HTTP interface of Grandstream UCM6200 microprogrammed router software is related to input validation errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges remotely...

Backdoor.Win32.Small.gs Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/551674fec6add7117c4be7f6b357e7cb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Small.gs Vulnerability: Unauthenticated Remote Command Execution Description: The...

Backdoor.Win32.Small.vjt Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/92ea873a2bbdaf0799d572bc4f30dc79.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Small.vjt Vulnerability: Unauthenticated Remote Command Execution Description: The...

Aruba Operating System 命令注入漏洞

Aruba Networks Aruba Operating System is the operating system for Aruba Controller-managed wireless LANs and Aruba Mobility Controllers from Aruba Networks, USA. A security vulnerability exists in the Aruba Operating System that stems from a remote arbitrary command execution vulnerability found ...

exploits

exploits Published PoCs can be found at exploitdb.comh...

Backdoor.Win32.MoonPie.40 Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/Backdoor.Win32.MoonPie.40.9dbb6d56bc9a7813305883acd0f9a355C.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.MoonPie.40 Vulnerability: Unauthenticated Remote Command...

Geutebruck Remote Command Execution Exploit

This Metasploit module bypasses the HTTP basic authentication used to access the /uapi-cgi/ folder and exploits multiple authenticated arbitrary command execution vulnerabilities within the parameters of various pages on Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and...

Atlassian Jira 代码注入漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira that can be exploited by a remote attacker with a "Jira administrator" to acce...

Aruba Networks ArubaOS 命令注入漏洞

Aruba Networks ArubaOS, an operating system for Aruba Mobility-Defined Networks including Mobility Controllers and Mobile Access Switches from Aruba Networks, is vulnerable to a command injection vulnerability. A remote arbitrary command execution vulnerability has been identified in Aruba SD-WAN...

Aruba Networks Aruba Operating System 命令注入漏洞

Aruba Operating System is the operating system for Aruba Controller-managed wireless LANs and Aruba Mobility Controllers from Aruba Networks, Inc. A command injection vulnerability exists in the Aruba Operating System that can be exploited by an attacker to trigger remote command execution via th...

ZTE ZXV10 M910 code issue vulnerability

The ZTE ZXV10 M910 is a video conferencing HD video server from ZTE Corporation China.A security vulnerability exists in the ZTE ZXV10 M910, which can be exploited by attackers to execute arbitrary commands by sending deserialized payloads to port 5001...

CVE-2021-33548

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-36231

Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects...