UNIMO Technology Digital Video Recorder Access Control Vulnerability

UNIMO Technology Digital Video Recorder is a player from UNIMO Technology. UNIMO Technology Digital Video Recorder suffers from an Access Control Error vulnerability that stems from a lack of authentication for critical functions. A remote attacker could use this vulnerability to execute arbitrar...

Cisco IOS XE Command Injection Root Privilege

The vulnerability of Cisco IOS XE web interfaces exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject commands into the base operating system with root privileges, as a result of sending...

PT-2022-7224 · Proscend · Proscend M330-W +7

Name of the Vulnerable Software and Affected Versions: Proscend M330-w versions Proscend M330-W5 versions Proscend M350-5G versions Proscend M350-W5G versions Proscend M350-6 versions Proscend M350-W6 versions Proscend M301-G versions Proscend M301-GW versions Proscend ICR 111WG versions...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

Command injection

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

CVE-2022-35201

The CVE-2022-35201 entry concerns the Tenda-AC18 router with firmware version v15.03.05.05, described as having a remote command execution (RCE) vulnerability. The connected records consistently identify this vulnerability as affecting Tenda-AC18 V15.03.05.05 and classify the impact as remote cod...

CVE-2022-35201

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

Tenda AC18 security vulnerabilities

Tenda AC18 is a router from Tenda China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a vulnerability that allows an attacker to achieve remote command execution...

CVE-2022-35201: Undefined Security Weakness

Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution RCE vulnerability...

PT-2022-22629 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda-AC18 version 15.03.05.05 Description: A remote command execution issue was discovered, allowing for potential unauthorized access and control. Recommendations: For Tenda-AC18 version 15.03.05.05, update to a newer version that contains ...

Device42 db_optimize() Arbitrary Command Execution

The vulnerability of the dboptimize function in the Device42 data center infrastructure management software exists because measures to neutralize special elements used in the operating system commands have not been implemented. Exploiting this vulnerability allows a remote attacker to execute...

Tenda AC9: Operating System Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 V15.03.2.21cn version is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands on the system...

Reolink RLC-410W Command Injection

The vulnerability of the Reolink RLC-410W IP camera’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2022-2354 WP-DBManager < 2.80.8 - Admin+ Remote Command Execution

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should...

Teamcenter File Server Cache Command Execution

The vulnerability of the File Server Cache service in the Teamcenter product lifecycle management system is related to insufficient checking of arguments passed to commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

BIG-IP iControl REST API Command Execution

The vulnerability of the iControl REST API for BIG-IP application protection interfaces is related to incorrect session duration settings. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely, disable arbitrary services, and create or delete arbitrary file...

GO-2022-0203 Remote command execution via "go get" command with "-insecure" option in cmd/go

The "go get" command is vulnerable to remote code execution. When the -insecure command-line option is used, "go get" does not validate the import path get/vcs.go only checks for "://" anywhere in the string, which allows remote attackers to execute arbitrary OS commands via a crafted web site...

GO-2022-0201 Remote command execution via "go get" command with cgo in cmd/go

The "go get" command with cgo is vulnerable to remote command execution by leveraging the gcc or clang plugin feature. When cgo is enabled, the build step during "go get" invokes the host C compiler, gcc or clang, adding compiler flags specified in the Go source files. Both gcc and clang support ...