21181 matches found
command injection in scp.c
The scp functionality in OpenSSH is vulnerable to command injection via backtick characters in the destination argument. The command will be run with the permissions of the user with which the files were copied on the remote server. To exploit this issue an attacker must manipulate a system...
Cisco IOS XE Unauthenticated Remote Command Execution (CVE-2023-20198) (Direct Check)
Binary data ciscoiosxeCVE-2023-20198directcheck.nbin...
GHSA-2X28-C7J7-23GV Subrion remote command execution vulnerability
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
Subrion remote command execution vulnerability
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
CVE-2023-46947
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
Design/Logic Flaw
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
PT-2023-30267 · Subrion · Subrion
Name of the Vulnerable Software and Affected Versions: Subrion version 4.2.1 Description: The issue is a remote command execution vulnerability located in the backend. Recommendations: For Subrion version 4.2.1, at the moment, there is no information about a newer version that contains a fix for...
CVE-2023-46947
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
CVE-2023-46947: Improper Control of Generation of Code
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
CVE-2023-46947
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
PT-2023-6738 · Qnap · Qts +2
Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.0.1.2376 build 20230421 QTS versions prior to 4.5.4.2374 build 20230416 QuTS hero versions prior to h5.0.1.2376 build 20230421 QuTS hero versions prior to h4.5.4.2374 build 20230417 QuTScloud versions prior to...
CVE-2023-46947
CVE-2023-46947 affects Subrion CMS, specifically version 4.2.1, with a remote command execution weakness in the backend. The connected sources confirm the vulnerability exists in Subrion 4.2.1 and reiterate backend RCE, but the documents do not provide concrete root-cause details, affected module...
The vulnerability of the nginx.ingress.kubernetes.io/permanent-redirect controller in the Kubernetes ingress-nginx cluster allows a attacker to execute arbitrary commands.
The vulnerability of the nginx.ingress.kubernetes.io/permanent-redirect controller in the Kubernetes ingress-nginx cluster is related to errors in processing incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Atlassian Confluence Data Center and Server broken access control
Added: 11/02/2023 Background Atlassian Confluence is a collaboration and knowledge management application. Problem Broken access control in Atlassian Confluence Data Center and Server could allow a remote attacker to create an administrator account, leading to remote command execution. Resolution...
CVE-2023-1714 Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
Unsafe variable extraction in bitrix/modules/main/classes/general/useroptions.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via 1 appending arbitrary content to existing PHP files or 2 PHAR deserialization...
CVE-2023-1714 Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
Unsafe variable extraction in bitrix/modules/main/classes/general/useroptions.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via 1 appending arbitrary content to existing PHP files or 2 PHAR deserialization...
CVE-2023-1713 Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted ".htaccess" file...
CVE-2023-1713 Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted ".htaccess" file...
CVE-2023-20220: Improper Limitation of a Pathname to a Restricted Directory
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. To exploit these vulnerabilities, the attacker must have valid device...
