Command injection

Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request OS Command Injection vulnerability in the HTTP interface. Depending upon configuration authentication may not be necessary...

CVE-2019-10880

CVE-2019-10880 affects Xerox ColorQube/XEROX products; vulnerability is a remote command execution via the HTTP interface. Root cause: OS Command Injection in the HTTP interface, exploitable by sending a crafted HTTP request, with the affected environment allowing the attacker to run commands as ...

CVE-2019-10880

Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request OS Command Injection vulnerability in the HTTP interface. Depending upon configuration authentication may not be necessary...

Ubiquiti Networks EdgeSwitch X Command Injection Vulnerability

The Ubiquiti Networks EdgeSwitch is a Gigabit network switch device from Ubiquiti Networks, Inc. A command injection vulnerability exists in Ubiquiti Networks EdgeSwitch X version 1.1.0 and earlier. The vulnerability arises from a network system or product not properly filtering specific elements...

The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the application for managing CentOS Web Panel servers admin/index.php?module=sendssh is related to insufficient validation of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the server management application CentOS Web Panel lies in the insufficient verification of the authenticity of executed requests, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the administration application for CentOS Web Panel admin/index.php?module=rootpwd is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to execute arbitrary commands.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Web Services Management Agent component of the Cisco IOS XE operating system, which allows a hacker to execute arbitrary commands.

The vulnerability of the Web Services Management Agent component of the Cisco IOS XE operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by sending specially crafted HTTP requests...

CVE-2018-19300

On D-Link DAP-1530 A1 before firmware version 1.06b01, DAP-1610 A1 before firmware version 1.06b01, DWR-111 A1 before firmware version 1.02v02, DWR-116 A1 before firmware version 1.06b03, DWR-512 B1 before firmware version 2.02b01, DWR-711 A1 through firmware version 1.11, DWR-712 B1 before...

CVE-2019-3914

Remote command injection vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname...

PT-2019-2543 · D Link · Dap-1530 +7

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1530 version 1.06b01 and earlier D-Link DAP-1610 version 1.06b01 and earlier D-Link DWR-111 version 1.02v02 and earlier D-Link DWR-116 version 1.06b03 and earlier D-Link DWR-512 version 2.02b01 and earlier D-Link DWR-711 versions...

Node.js third-party modules: Server Side JavaScript Code Injection

I would like to report a Service Side JavaScript Code Injection in fastify. It allows an attacker that can control a single property name in the serialization schema to achieve Remote Command Execution in the context of the web server. Module module name: fastify version: 2.2.0 npm page:...

The vulnerability of the set_host_domain_name function in Cisco Linksys E1200 and Cisco Linksys E2500 router microprogramming systems allows a hacker to execute arbitrary commands.

The vulnerability of the sethostdomainname function libshared.so in Cisco Linksys E1200 and Cisco Linksys E2500 router microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a...

The vulnerability of Cisco Linksys E1200 and Cisco Linksys E2500 microprogrammed software routers stems from errors in data filtering during the transmission and reception of data from NVRAM. This vulnerability allows attackers to execute arbitrary commands.

The vulnerability of Cisco Linksys E1200 and Cisco Linksys E2500 router microprogramming systems exists due to errors in data filtering, both when sending and receiving data from NVRAM. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TeemIp IPAM < 2.4.0 - new_config Command Injection Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "TeemIp IPAM %q This module exploits a command injection vulnerability in TeemIp versions prior to 2.4.0. The "newconfig" parameter of "exec.php"...

PhreeBooks ERP 5.2.3 Remote Command Execution

Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Date: 2010-04-03 Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3 Category: Webapps Tested on: XAMPP for Linux 5.6.38...

PhreeBooks ERP 5.2.3 - Remote Command Execution Exploit

Exploit for php platform in category web applications Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3 Category:...

PhreeBooks ERP 5.2.3 - Remote Command Execution

PhreeBooks ERP 5.2.3 - Remote Command Execution Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Date: 2010-04-03 Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3...

PhreeBooks ERP 5.2.3 - Remote Command Execution (1)

Exploit Title: PhreeBooks ERP 5.2.3 - Remote Command Execution Date: 2010-04-03 Exploit Author: Metin Yunus Kandemir kandemir Vendor Homepage: https://www.phreesoft.com/ Software Link: https://sourceforge.net/projects/phreebooks/ Version: v5.2.3 Category: Webapps Tested on: XAMPP for Linux 5.6.38...

IBM Security Privileged Identity Manager Input Validation Error Vulnerability

IBM Security Privileged Identity Manager ISPIM is an identity management product within the IBM Identity Governance and Management solution from IBM in the United States. The product is designed to protect, automate and audit the use of privileged identities to help defend against insider threats...