15770 matches found
The vulnerability of the Web GUI component of the microprogramming software for Moxa EDR-810 allows a intruder to execute arbitrary commands.
The vulnerability of the Web GUI component of the microprogramming software for Moxa EDR-810 lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created HTTP POST request...
CVE-2019-10958
Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...
Barco WePresent - file_transfer.cgi Command Injection Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Barco WePresent filetransfer.cgi Command Injection", 'Description' = %q This module exploits an unauthenticated remote command injection...
CVE-2020-5505
Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...
CVE-2020-5505
Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...
DEBIAN-CVE-2014-7844
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address...
CVE-2014-5092
Status2k allows Remote Command Execution in admin/options/editpl.php...
CVE-2014-5092
Status2k allows Remote Command Execution in admin/options/editpl.php...
CVE-2014-5092
CVE-2014-5092 affects the Status2k Server Monitoring Software . The initial description states that “Status2k allows Remote Command Execution in admin/options/editpl.php,” indicating a vulnerability in the web interface that enables an attacker to execute commands remotely via the affected PHP fi...
CVE-2012-2142
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator...
CVE-2019-20224
netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit
Exploit for java platform in category web applications Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Tested on: Windo...
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Date: 2020-01-08 Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Tested on: Windows CVE : CVE-2019-2729 SerialLogic.py...
Oracle Weblogic 10.3.6.0.0 Remote Command Execution
Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Date: 2020-01-08 Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Tested on: Windows CVE : CVE-2019-2729 SerialLogic.py...
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit Title: Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Date: 2020-01-08 Exploit Author: Waffles & Paveway3 Vendor Homepage: https://www.oracle.com/middleware/technologies/weblogic.html Version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0...
CVE-2019-19518
CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...
VulnCheck KEV: CVE-2017-6334
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands...
AKIPS Network Monitor Command Execution Vulnerability
AKIPS Network Monitor is a suite of network monitoring software from the Australian company AKIPS. A security vulnerability exists in the application login page in AKIPS Network Monitor versions 15.37 through 16.5. The vulnerability can be exploited by a remote attacker to execute arbitrary...
Pete Stein GoScript Remote Command Execution Vulnerability
Pete Stein GoScript is a web file processing script developed by software developer Pete Stein. A remote command execution vulnerability exists in go.cgi in Pete Stein GoScript version 2.0. A remote attacker could use this vulnerability to perform unauthorized operations on an affected computer i...