17413 matches found
The vulnerability of the MDPR component in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.
The vulnerability of the MDPR component in the Gstreamer multimedia framework is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Chamilo 1.11.18 Command Injection Exploit
This Metasploit module exploits an unauthenticated remote command execution vulnerability that affects Chamilo versions 1.11.18 and below. Due to a functionality called Chamilo Rapid to easily convert PowerPoint slides to courses on Chamilo, it is possible for an unauthenticated remote attacker t...
The vulnerability of the MDPR component in the Gstreamer multimedia framework allows a hacker to execute arbitrary code.
The vulnerability of the MDPR component in the Gstreamer multimedia framework is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of ScrutisWeb monitoring software for bank ATMs lies in its ability to download files of a malicious nature without limitation, allowing an attacker to execute arbitrary code.
The vulnerability of ScrutisWeb banknote monitoring software lies in its ability to download unlimited amounts of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by downloading any file...
The vulnerability of the CMD_W_REG command processor in the CE_A protocol implementation of the CE805M data collection and transmission device allows a perpetrator to modify parameters so that commands of the operating system are executed during automatic updates of the application software.
The vulnerability of the CMDWREG command processor in the CEA protocol implementation of the CE805M device for data collection and transmission is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to modify parameters so that system commands are executed...
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...
AZL-56490 CVE-2022-48174 affecting package busybox for versions less than 1.35.0-13
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution...
DEBIAN-CVE-2022-48522
In Perl 5.34.0, function Sfinduninitvar in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation...
CVE-2022-36648
The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third...
PT-2023-26520 · Cbc · Cbc
Name of the Vulnerable Software and Affected Versions: CBC products affected versions not specified Description: The issue allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. The NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H,...
CVE-2023-25915
CVE-2023-25915 concerns Danfoss AK-SM800A (OT/embedded system) with an improper input validation flaw. The connected sources consistently describe an authenticated remote attacker who could execute arbitrary commands on the target system, indicating a remote code execution risk due to input valid...
CVE-2023-38961
Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...
CVE-2023-38836
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks...
CBC AMERICA 多款产品操作系统命令注入漏洞
CBC AMERICA DR series and CBC AMERICA NR series are a series of digital video recorders from CBC AMERICA. A security vulnerability exists in a number of CBC AMERICA products. The vulnerability stems from an operating system command injection, which can be exploited by a remote attacker to execute...
Emaar Real Estate Agency Directory System 5.7 Shell Upload
==================================================================================================================================== | Title : Emaar – Real Estate Agency Directory System v5.7 Unrestricted File Upload Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
CVE-2023-38961
Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...
CVE-2022-24989
CVE-2022-24989 affects TerraMaster NAS/TOS up to version 4.2.30, enabling remote code execution as root via PHP Object Instantiation in the api.php?mobile/createRaid endpoint. The exploit relies on unsanitized input in the raidtype parameter (Shell metacharacters) and can be chained with credenti...
CVE-2023-39416
CVE-2023-39416 affects Proself Enterprise/Standard Edition v5.61 and earlier, Proself Gateway Edition v1.62 and earlier, and Proself Mail Sanitize Edition v1.07 and earlier. The vulnerability is an OS command injection that can be triggered by a remote attacker with administrative privileges afte...
Dell PowerScale OneFS Protection Mechanism Bypass Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A protection mechanism bypass vulnerability exists in Dell PowerScale OneFS, which can be exploited by attackers to cause denial of service, information disclosur...