Zengenti Contensis Classic 授权问题漏洞

Zengenti Contensis Classic is a content management system from Zengenti UK. A security vulnerability exists in Zengenti Contensis Classic prior to version 15.2.1.79, which stems from a file upload wizard that fails to properly check if a user has been authenticated. The vulnerability can be...

PT-2022-6319 · Zyxel · Zyxel Nwa110Ax

Name of the Vulnerable Software and Affected Versions: Zyxel NWA110AX versions prior to 6.50ABTG.0C0 Description: The issue is related to an improper check for unusual conditions in the firmware, which could allow a LAN attacker to cause a temporary denial-of-service DoS by sending crafted VLAN...

PT-2022-4366

Name of the Vulnerable Software and Affected Versions UNIMO digital video recorders versions v1.0.20.13 and earlier UNIMO digital video recorders versions v2.0.20.13 and earlier Description The issue is related to the absence of authentication for a critical function in the firmware of UNIMO...

UNIMO Technology Digital Video Recorder 访问控制错误漏洞

UNIMO Technology Digital Video Recorder is a player from UNIMO Technology. UNIMO Technology Digital Video Recorder suffers from an Access Control Error vulnerability that stems from a lack of authentication for critical functions. A remote attacker could use this vulnerability to execute arbitrar...

The vulnerability in the web interface of Cisco IOS XE allows a hacker to inject commands into the base operating system with root privileges.

The vulnerability of Cisco IOS XE web interfaces exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject commands into the base operating system with root privileges, as a result of sending...

PT-2022-7224 · Proscend · Proscend M330-W +7

Name of the Vulnerable Software and Affected Versions: Proscend M330-w versions Proscend M330-W5 versions Proscend M350-5G versions Proscend M350-W5G versions Proscend M350-6 versions Proscend M350-W6 versions Proscend M301-G versions Proscend M301-GW versions Proscend ICR 111WG versions...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

Command injection

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

The CVE-2022-35201 entry concerns the Tenda-AC18 router with firmware version v15.03.05.05, described as having a remote command execution (RCE) vulnerability. The connected records consistently identify this vulnerability as affecting Tenda-AC18 V15.03.05.05 and classify the impact as remote cod...

Tenda AC18 安全漏洞

Tenda AC18 is a router from Tenda China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a vulnerability that allows an attacker to achieve remote command execution...

PT-2022-22629 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda-AC18 version 15.03.05.05 Description: A remote command execution issue was discovered, allowing for potential unauthorized access and control. Recommendations: For Tenda-AC18 version 15.03.05.05, update to a newer version that contains ...

The vulnerability of the db_optimize() function (applmgr/applmgrsite/views.py) in the Device42 data center infrastructure management software allows a perpetrator to execute arbitrary commands.

The vulnerability of the dboptimize function in the Device42 data center infrastructure management software exists because measures to neutralize special elements used in the operating system commands have not been implemented. Exploiting this vulnerability allows a remote attacker to execute...

Tenda AC9 操作系统命令注入漏洞

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

The vulnerability of the Reolink RLC-410W IP camera’s microprogramming software arises from the lack of measures taken to neutralize the special elements used in the operating system’s command set. This vulnerability allows a intruder to execute arbitrary commands.

The vulnerability of the Reolink RLC-410W IP camera’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2022-2354 WP-DBManager < 2.80.8 - Admin+ Remote Command Execution

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should...

The vulnerability of the File Server Cache service in the Teamcenter product lifecycle management system allows a hacker to execute arbitrary commands.

The vulnerability of the File Server Cache service in the Teamcenter product lifecycle management system is related to insufficient checking of arguments passed to commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the iControl REST API for BIG-IP application protection interfaces allows a attacker to execute arbitrary commands, disable arbitrary services, and create or delete arbitrary files.

The vulnerability of the iControl REST API for BIG-IP application protection interfaces is related to incorrect session duration settings. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely, disable arbitrary services, and create or delete arbitrary file...