CVE-2022-4364

A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. Affected by this issue is some unknown functionality of the file palette.php of the component Web Service Handler. The manipulation of the argument palette leads to command injection. The attack is possible to be carried out...

PT-2022-26985 · Teledyne Flir · Teledyne Flir Ax8

Name of the Vulnerable Software and Affected Versions: Teledyne FLIR AX8 versions up to 1.46.16 Description: A critical vulnerability has been found in the Web Service Handler component of the affected software. The issue is related to an unknown function of the file palette.php, where the...

Teledyne FLIR AX8 操作系统命令注入漏洞

Teledyne FLIR AX8 is a series of thermal surveillance cameras from Teledyne FLIR USA. A command injection vulnerability exists in Teledyne FLIR AX8 version 1.46.16 and earlier, which stems from an unknown function in the palette.php file of its Web Service Handler component that operates on the...

VulnCheck KEV: CVE-2022-37061

All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. A successful exploit could allow...

PT-2022-26458 · Nako3Edit · Nako3Edit

Name of the Vulnerable Software and Affected Versions: Nako3edit versions 3.3.74 and earlier Description: The issue allows a remote attacker to obtain the appkey of the product and execute an arbitrary OS command on the product. This is due to an OS command injection vulnerability in the editor...

CVE-2021-4242

A vulnerability was found in Sapido BR270n, BRC76n, GR297 and RB1732 and classified as critical. Affected by this issue is some unknown functionality of the file ip/syscmd.htm. The manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2022-36962

SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands...

Optilink Network OP-XT71000N 命令注入漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. The Optilink Network OP-XT71000N version V2.2 suffers from a command injection vulnerability that can be exploited remotely when an attacker sends arbitrary code that results in a COMMAND EXECUTION to the "PingTest...

FLIR AX8 1.46.16 Remote Command Injection Exploit

All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to remote command injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. This module uses the vulnerability...

FLIR AX8 1.46.16 Remote Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/stopwatch' class MetasploitModule 'FLIR AX8 unauthenticated RCE', 'Description' = %q All FLIR AX8 thermal sensor cameras versions up to and including 1.46.1...

FLIR AX8 unauthenticated RCE

All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Remote Command Injection. This can be exploited to inject and execute arbitrary shell commands as the root user through the id HTTP POST parameter in the res.php endpoint. This module uses the vulnerability...

PT-2022-6670 · Vmware · Vmware Aria Operations For Networks

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations for Networks affected versions not specified Description: The issue is related to an information disclosure vulnerability in VMware Aria Operations for Networks. A malicious actor with network access could perform a...

PT-2022-5764 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR823G version 1.02B05 Description: The issue is related to the lack of data sanitization at the management level, which can be exploited by a remote attacker to execute arbitrary commands. This can lead to command injection...

Movable Type < 6.8.3 / 7.x < 7.8.2 Remote Command Injection

Movable Type 6.8.3 / 7.x 7.8.2 contains an OS Command Injection vulnerability by sending a specially crafted POST request to the XMLRPC API. No source data...

Movable Type < 6.8.7 / 7.x < 7.8.5 Remote Command Injection

Movable Type 6.8.7 / 7.x 7.8.5 contains an OS Command Injection vulnerability by sending a specially crafted POST request to the XMLRPC API. No source data...

CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

PT-2022-5275 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR878 version 1.30B08 Hotfix 04 Description: The issue is related to a command injection vulnerability via the component /bin/proc.cgi. This vulnerability may allow a remote attacker to execute arbitrary code. The /bin/proc.cgi...

CVE-2016-20017

CVE-2016-20017 affects D-Link DSL-2750B devices prior to firmware version 1.05. The vulnerability allows remote unauthenticated command injection via the login.cgi cli parameter, enabling total compromise of affected routers as described in multiple sources. Exploitation was observed in the wild ...

CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

MiniDVBLinux 5.4 Remote Root Command Injection Exploit

!/usr/bin/env python3 MiniDVBLinux 5.4 Remote Root Command Injection Vulnerability Vendor: MiniDVBLinux Product web page: https://www.minidvblinux.de Affected version: =5.4 Summary: MiniDVBLinuxTM Distribution MLD. MLD offers a simple way to convert a standard PC into a Multi Media Centre based o...