CVE-2021-30233

The CVE-2021-30233 entry affects China Mobile An Lianbao WF-1 router (version 1.0.1). The vulnerability exists in the api/ZRIptv/setIptvInfo interface, where remote attackers can trigger command execution by supplying shell metacharacters in the iptv_vlan parameter. This is a server-side input ha...

CVE-2021-30229

CVE-2021-30229 affects the China Mobile An Lianbao WF-1 router (version 1.0.1). The vulnerable component is the api/zrDm/set_zrDm interface, where remote attackers can inject shell metacharacters into parameters dm_enable, AppKey, or Pwd to execute arbitrary commands. Public references confirm a ...

CVE-2021-29147

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

PT-2021-14490 · Prisma · Prisma Vs Code

Name of the Vulnerable Software and Affected Versions: Prisma VS Code versions prior to 2.20.0 Description: This issue is a Remote Code Execution vulnerability. It affects the Prisma VS Code extension when a custom binary path for the Prisma format binary is set in VS Code Settings, for example,...

Tencent OS-tiny 输入验证错误漏洞

Tencent OS-tiny is a real-time operating system developed by Tencent for the Internet of Things IoT. It is characterized by low power consumption, low resource consumption, modularity, security and reliability, which can effectively improve the development efficiency of IoT terminal products. An...

Apache NuttX 输入验证错误漏洞

Apache NuttX is a real-time embedded operating system from the Apache Foundation USA. Apache NuttX suffers from an input validation error vulnerability that stems from the fact that incorrect memory allocation could lead to arbitrary memory allocation, which could result in unexpected behavior su...

Aruba ClearPass Policy Manager 操作系统命令注入漏洞

Aruba ClearPass Policy Manager is an application that provides a wireless network security access management system. An operating system command injection vulnerability exists in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.9, and 6.7.14-HF1, which can be exploited by a remote...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates from api/zrDm/setzrDm, that can be exploited by a remote attacker to execute arbitrary commands via...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates in the api/ZRFirmware/settimezone set time zone interface, that can be exploited by remote attacker...

INIM ELECTRONICS SmartLiving System 操作系统命令注入漏洞

INIM ELECTRONICS SmartLiving System is an application of the Italian company INIM ELECTRONICS. A SmartLiving System. Inim Electronics SmartLiving SmartLAN/G/SI = 6.x An operating system command injection vulnerability can be exploited to allow an attacker to remotely execute system commands using...

Aruba Networks AirWave Management Platform 命令注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. A command injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a special...

CVE-2020-17999

Cross Site Scripting XSS in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php"...

[SECURITY] Fedora 33 Update: salt-3003-1.fc33

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 Code Injection Vulnerability

Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are routers from Buffalo Japan.The Buffalo WSR-2533DHPL2 and WSR-2533DHP3 are vulnerable to code injection, which can be exploited by attackers to remotely execute code...

Exploit for OS Command Injection in Gpononu 1Ge_Router_Wifi_Onu_V2801Rw_Firmware

CVE-2020-8958 CVE-2020-8958: Authenticated Remote Code Exe...

CVE-2021-30642

An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges...

Foxit Studio Photo ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

safe-flat 安全漏洞

safe-flat is an application. for safely flattening nested JavaScript objects. A security vulnerability exists in safe-flat versions 2.0.0 through 2.0.1, which allows an attacker to cause a denial of service and possibly remote code execution...

CVE-2021-21224

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Recent assessments: gwillcox-r7 at June 17, 2021 3:06pm UTC reported: According to...

Privilege Escalation

salt is vulnerable to privilege escalation. The vulnerability exists due to the salt-api not honoring eauth credentials for the wheelasync client allowing an attacker to remotely run wheel modules on the master...