15566 matches found
Command injection
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
WordPress Plugin Forminator 1.24.6 - Unauthenticated Remote Command Execution
Exploit Title: WordPress Plugin Forminator 1.24.6 - Unauthenticated Remote Command Execution Date: 2023-07-20 Exploit Author: Mehmet Kelepçe Vendor Homepage: https://wpmudev.com/project/forminator-pro/ Software Link: https://wordpress.org/plugins/forminator/ Version: 1.24.6 Tested on: PHP - Mysql...
CVE-2023-33374
Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote...
CVE-2023-33374
Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote...
PT-2023-24323 · Unknown · Connected Io
Name of the Vulnerable Software and Affected Versions: Connected IO versions 2.1.0 and prior Description: The issue allows attackers to execute arbitrary OS commands on devices, resulting in arbitrary remote command execution. This is due to a command in the communication protocol that enables th...
WordPress Forminator 1.24.6 Shell Upload
Exploit Title: WordPress Plugin Forminator 1.24.6 - Unauthenticated Remote Command Execution Date: 2023-07-20 Exploit Author: Mehmet Kelepçe Vendor Homepage: https://wpmudev.com/project/forminator-pro/ Software Link: https://wordpress.org/plugins/forminator/ Version: 1.24.6 Tested on: PHP - Mysql...
CVE-2023-33374
Connected IO v2.1.0 and earlier are vulnerable due to a command in the communication protocol that allows the management platform to specify arbitrary OS commands for devices to execute, causing arbitrary remote command execution. Affected component: the device communication protocol in Connected...
CVE-2023-38942
Dango-Translator v4.5.5 was discovered to contain a remote command execution RCE vulnerability via the component app/config/cloudconfig.json...
CVE-2023-38942
Dango-Translator v4.5.5 was discovered to contain a remote command execution RCE vulnerability via the component app/config/cloudconfig.json...
CVE-2023-37679
A remote command execution RCE vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server...
CVE-2023-37679
A remote command execution RCE vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server...
Command injection
A remote command execution RCE vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server...
PT-2023-26699 · Unknown · Dango-Translator
Name of the Vulnerable Software and Affected Versions: Dango-Translator version 4.5.5 Description: A remote command execution RCE issue was found in Dango-Translator via the app/config/cloud config.json component. Recommendations: For Dango-Translator version 4.5.5, at the moment, there is no...
NextGen Mirth Connect Command Injection Vulnerability
NextGen Mirth Connect is a healthcare integration engine from NextGen USA. A security vulnerability exists in NextGen Mirth Connect version v4.3.0, which stems from a vulnerability that allows an attacker to execute arbitrary commands on the hosting server...
Dango-Translator Command Injection Vulnerability
Dango-Translator is an OCR-based raw meat translation software by the individual developer of Fatty Duanzi PantsuDango. A security vulnerability exists in Dango-Translator version 4.5.5, which stems from a Remote Command Execution RCE vulnerability in the component app/config/cloudconfig.json...
CVE-2023-37679
A remote command execution RCE vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server...
The vulnerability of RocketMQ’s messaging platform’s NameServer component allows a hacker to execute arbitrary commands on behalf of a user.
The vulnerability of the NameServer component of the RocketMQ messaging platform is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of users remotely...
CVE-2023-37679
CVE-2023-37679 / CVE-2023-43208 (NextGen HealthCare Mirth Connect) : Open-source data integration platform vulnerable to unauthenticated remote code execution due to improper/deserialization handling. Affects Mirth Connect versions prior to 4.4.1 (PoCs and advisories reference vulnerable ranges i...
