21181 matches found
CVE-2023-35055
A buffer overflow vulnerability exists in the httpd nextpage functionality of Yifan YF325 v1.020221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the nextpage parameter in the...
Buffer overflow
A buffer overflow vulnerability exists in the httpd nextpage functionality of Yifan YF325 v1.020221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the nextpage parameter in the...
The vulnerability of the communication protocol implementation for microprogrammed router software ER2000, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary OS commands on devices.
The vulnerability of the communication protocol implementation for Connected IO microprogrammed routers involves the introduction or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary OS commands on devices remotely...
Peplink Surf SOHO HW1 Operating System Command Injection Vulnerability
The Peplink Surf SOHO HW1 is a small router from Peplink. An OS command injection vulnerability exists in Peplink Surf SOHO HW1 v6.3.5, which stems from an OS command injection vulnerability in the api.cgi cmd.mvpn.x509.write function. An attacker can exploit this vulnerability to execute command...
CVE-2023-45312
In the mtprotoproxy aka MTProto proxy component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability...
CVE-2023-45312
In the mtprotoproxy aka MTProto proxy component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability...
CVE-2023-30806
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to...
UBUNTU-CVE-2023-30801
All versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and...
PT-2023-8956
Name of the Vulnerable Software and Affected Versions qBittorrent versions 4.5.5 and earlier Description The issue is related to the use of default credentials when the web user interface is enabled, allowing a remote attacker to authenticate and execute arbitrary operating system commands using...
PT-2023-29493 · Unknown · Mtproto Proxy
Name of the Vulnerable Software and Affected Versions: mtproto proxy versions through 0.7.2 Description: A low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability. Recommendations: For versions throug...
CVE-2023-45312
In the mtprotoproxy aka MTProto proxy component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability...
qBittorrent Trust Management Issues Vulnerabilities
qBittorrent is a cross-platform lightweight BitTorrent client. A security vulnerability exists in qBittorrent 4.5.5 and earlier versions, which stems from the use of default credentials, and can be used by a remote attacker to execute arbitrary operating system commands...
F5 BIG-IP 代码问题漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIG-IP suffers from an insufficient session expiration vulnerability, which can be exploited by an attacker to reuse sessio...
CVE-2023-45312
In the mtprotoproxy aka MTProto proxy component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability...
CVE-2023-45312: Initialization of a Resource with an Insecure Default
In the mtprotoproxy aka MTProto proxy component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability...
CVE-2023-30801: Use of Default Credentials
All versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and...
Ericsson Erlang Security Vulnerability
Ericsson Erlang is a general-purpose concurrency-oriented programming language from Ericsson Sweden. A security vulnerability exists in Ericsson Erlang version 0.7.2, which originates from a remote attacker with low privileges who can access an improperly protected default installation without...
CVE-2023-45312
The CVE-2023-45312 issue affects the mtproto_proxy (MTProto proxy) component for Erlang up to version 0.7.2, where a low-privileged remote attacker can access a default installation without authentication and achieve remote command execution. Public disclosures in Red Hat, GHSA, OSV, CVE lists co...
VulnCheck KEV: CVE-2021-33553
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
VulnCheck KEV: CVE-2021-33552
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...