Directory Management System add-directory.php SQL Injection

The vulnerability of the add-directory.php component of the Directory Management System relates to the ability to execute commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely, using the fullname parameter...

VulnCheck KEV: CVE-2021-20655

FileZen V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2 allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

Path traversal

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774

CVE-2022-29774 affects iSpy v7.2.2.0, exposing remote command execution via path traversal. The vulnerability occurs in iSpyConnect/iSpy and allows an attacker to access or execute commands through crafted paths. Core details about the exact vulnerable component and root cause are not elaborated ...

CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

CVE-2022-29774: Improper Limitation of a Pathname to a Restricted Directory

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal...

PT-2022-19823 · Ispy · Ispy

Name of the Vulnerable Software and Affected Versions: iSpy version 7.2.2.0 Description: The issue allows for remote command execution via path traversal. Recommendations: For iSpy version 7.2.2.0, at the moment, there is no information about a newer version that contains a fix for this...

Ubuntu 18.04 LTS : SPIP vulnerabilities (USN-5482-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5482-1 advisory. It was discovered that SPIP incorrectly validated inputs. An authenticated attacker could possibly use this issue to execute arbitrary code. This issue...

CVE-2022-33750

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

CVE-2022-33750

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

Broadcom CA Automic Automation Authorization Issue Vulnerability

Broadcom CA Automic Automation is an automation product from Broadcom, Inc. It provides a service orchestration and automation platform to automate complex applications, platforms, and technology environments. A security vulnerability exists in Broadcom CA Automic Automation versions 12.2 and 12....

CVE-2022-33750: Improper Authentication

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

CVE-2022-20825 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service DoS condition. Th...

CVE-2022-20825 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service DoS condition. Th...

Technical Details Released for 'SynLapse' RCE Vulnerability Reported in Microsoft Azure

Microsoft has incorporated additional improvements to address the recently disclosed SynLapse security vulnerability in order to meet comprehensive tenant isolation requirements in Azure Data Factory and Azure Synapse Pipelines. The latest safeguards include moving the shared integration runtimes...

PT-2022-3588 · Robustel · Robustel R1510

Name of the Vulnerable Software and Affected Versions: Robustel R1510 version 3.3.0 Description: The issue is related to the implementation of the Art2 command in the CLISH Command Line Interface SHell of the Robustel R1510 VPN router's firmware. It is associated with weaknesses in security...

HID Mercury PLC Shell Command Execution

The vulnerability of HID Mercury programmable logic controllers exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary shell commands by sending a special...