15750 matches found
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV016, Cisco Small Business RV042, Cisco Small Business RV042G, Cisco Small Business RV082, Cisco Small Business RV320, and Cisco Small Business RV325 exists due to insufficient validation of input data. This allows attackers to execute arbitrary commands.
The vulnerability of the web-based management interface for Cisco Small Business RV016, Cisco Small Business RV042, Cisco Small Business RV042G, Cisco Small Business RV082, Cisco Small Business RV320, and Cisco Small Business RV325 routers exists due to insufficient validation of input data...
The vulnerability of the Yealink Device Management platform allows a perpetrator to execute arbitrary commands.
The vulnerability of the Yealink Device Management platform lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the root user remotely...
Huawei HarmonyOS Wearables Out-of-Bounds Writing Vulnerability
Huawei HarmonyOS Wearables is an electronic watch from Huawei, a Chinese company Huawei.An out-of-bounds write vulnerability exists in the Huawei HarmonyOS Wearables Bluetooth module. An attacker could exploit the vulnerability to cause remote command execution...
Huawei HarmonyOS 缓冲区错误漏洞
Huawei HarmonyOS Wearables is an electronic watch from Huawei, a Chinese company Huawei.An out-of-bounds write vulnerability exists in the Huawei HarmonyOS Wearables Bluetooth module. An attacker could exploit the vulnerability to cause remote command execution...
Huawei HarmonyOS 缓冲区错误漏洞
Huawei HarmonyOS Wearables is an electronic watch from Huawei, a Chinese company Huawei.An out-of-bounds write vulnerability exists in the Huawei HarmonyOS Wearables Bluetooth module. An attacker could exploit the vulnerability to cause remote command execution...
XStream: remote command execution attack by manipulating the processed input stream
A flaw was found in XStream. By manipulating the processed input stream, a remote attacker may be able to obtain sufficient rights to execute commands. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
F5 Networks BIG-IP : BIG-IP TMUI vulnerability (K55543151)
The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.5 / 14.1.3.1 / 15.1.0.5 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K55543151 advisory. - On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all...
Advanced Comment System 1.0 - Remote Command Execution Exploit
Exploit Title: Advanced Comment System 1.0 - Remote Command Execution RCE Exploit Author: Nicole Daniella Murillo Mejias Version: Advanced Comment System 1.0 Tested on: Linux !/usr/bin/env python3 DESCRIPTION: Commands are Base64 encoded and sent via POST requests to the vulnerable application, t...
Advanced Comment System 1.0 Remote Command Execution
Exploit Title: Advanced Comment System 1.0 - Remote Command Execution RCE Date: November 30, 2021 Exploit Author: Nicole Daniella Murillo Mejias Version: Advanced Comment System 1.0 Tested on: Linux !/usr/bin/env python3 DESCRIPTION: Commands are Base64 encoded and sent via POST requests to the...
Advanced Comment System 1.0 - Remote Command Execution (RCE)
Exploit Title: Advanced Comment System 1.0 - Remote Command Execution RCE Date: November 30, 2021 Exploit Author: Nicole Daniella Murillo Mejias Version: Advanced Comment System 1.0 Tested on: Linux !/usr/bin/env python3 DESCRIPTION: Commands are Base64 encoded and sent via POST requests to the...
The vulnerability of the getprofile.sh script, a monitoring tool for Nagios XI, allows a perpetrator to execute arbitrary commands.
The vulnerability of the getprofile.sh script, a monitoring tool for Nagios XI, is related to the failure to take measures to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to insufficient validation of input data, allows a hacker to execute arbitrary commands.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient validation of input data during syntax analysis of image files. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data, allowing attackers to execute arbitrary commands.
The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series router microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2020-7879
This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie'COOKIE' . The value is transferred to the --header option in wget binary, and there is no validation check...
Design/Logic Flaw
This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie'COOKIE' . The value is transferred to the --header option in wget binary, and there is no validation check...
Tobesoft Nexacro 输入验证错误漏洞
Tobesoft Nexacro is a unified framework-based OSMU single-source multi-purpose application development solution from Tobesoft, South Korea. Nexacro 17 suffers from a security vulnerability that stems from an arbitrary file creation due to incorrect input validation found in the copy method of the...
Gerapy Authentication Remote Command Execution Vulnerability
Gerapy is a crawler framework based on the Scrapy Scrapyd Scrapyd Client Scrapyd API Django. Gerapy authenticates remote command execution vulnerabilities, which can be exploited by attackers to gain control of the server...
CVE-2021-44093
A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file to get a WebShell...
