CVE-2019-19459

An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files under the web root, or .bat files that will be used with auto start. This allows an attacker to execute arbitrary commands on the server...

WordPress Plainview Activity Monitor Remote Command Execution Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.Plainview Activity Monitor is used in one of the website user activity monitoring plugin. A remote command...

WordPress Plainview Activity Monitor 20161228 Remote Command Execution Exploit

WordPress Plainview Activity Monitor plugin is vulnerable to OS command injection which allows an attacker to remotely execute commands on the underlying system. Application passes unsafe user supplied data to ip parameter into activitiesoverview.php. Privileges are required in order to exploit...

WordPress Plainview Activity Monitor 20161228 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Plainview Activity Monitor RCE', 'Description' = %q Plainview Activity Monitor Wordpress plugin is vulnerable to OS command injection...

Command Execution Vulnerability in the Backend of JHR-N835R Router

JCG JHR-N835R with USB shared storage, shared printer and other functions. It still continues the feature of high power of King Kong series, with three external antennas for stronger signal, and you can adjust the power level of the machine as needed through three gears, which is the best choice...

CVE-2019-18184

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...

CVE-2019-18184

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...

Command injection

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...

CVE-2019-18184

Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...

CVE-2019-18184

CVE-2019-18184 affects Crestron DMC-STRO 1.0 devices, enabling remote root command execution via shell metacharacters passed to the ping function. Multiple connected sources (NVD entry and vendor/Red Hat/CNVD records) corroborate a remote command-injection vulnerability in the DMC-STRO streaming ...

Exploit for Path Traversal in Nazgul Nostromo_Nhttpd

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit R...

Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk Command Execution Vulnerabilities

Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk are both products of Sangoma Technologies, a Canadian company.Sangoma Technologies Asterisk is a suite of open source telephone switch PBX system software. Sangoma Technologies Asterisk is an open source telephone exchange...

Symantec Endpoint Protection Client 12.x < 12.1.7454.7000 / 14.x < 14.2.5323.2000 Multiple Vulnerabilities (SYMSA1488)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.x prior to 12.1.7454.7000 or 14.x prior to 14.2.5323.2000. It is, therefore, affected by multiple vulnerabilities. - An authentication bypass vulnerability exists in the second layer of password protection. ...

UBUNTU-CVE-2013-2093

Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands...

PT-2019-6875 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 3.3.1 Description: The issue arises from improper validation of user input in certain files, allowing remote attackers to execute arbitrary commands. This is specifically related to the viewimage.php and barcode.lib.p...

The vulnerability of the deserialization function in Java software for creating reports for deployed Cisco Security Manager devices allows a attacker to execute arbitrary commands.

The vulnerability of the deserialization function in Java software for creating reports for deployed Cisco Security Manager devices exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

CVE-2019-19117

CVE-2019-19117 affects PHICOMM K2 (PSG1218) with V22.5.9.163. The flaw is in /usr/lib/lua/luci/controller/admin/autoupgrade.lua, where remote authenticated users can execute arbitrary commands via shell metacharacters in the cgi-bin/luci autoUpTime parameter. CVSS v3.1 base score 8.8 (HIGH) with ...

The vulnerability of the ABAP Tests module of the SAP NetWeaver Process Integration software allows a perpetrator to execute operating system commands with elevated privileges.

The vulnerability of the ABAP Tests module of the SAP NetWeaver Process Integration software exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute operating system command...

CVE-2019-3660

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests...

Technicolor TD5130.2 - Remote Command Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: Technicolor TD5130.2 - Remote Command Execution Exploit Author: João Teles Vendor Homepage: https://www.technicolor.com/ Version: TD5130v2 Firmware Version: OIFwV20 CVE : CVE-2019-18396 --------------------------- POST...