15763 matches found
CVE-2021-30234
The api/ZRIGMP/setMLDPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLDPROXYWANCONNECT parameter...
CVE-2021-30230
The api/ZRFirmware/settimezone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the zonename parameter...
CVE-2021-29147
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...
CVE-2021-29147
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...
China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞
China Mobile An Lianbao WF-1 router is a router from China Mobile China. An operating system command injection vulnerability exists in version 1.0.1 of the China Mobile An Lianbao WF-1 router, which stems from api/ZRIGMP/setMLDPROXY and allows remote attackers to execute arbitrary commands via...
[ASA-202104-1] gitlab: multiple issues
Arch Linux Security Advisory ASA-202104-1 ========================================= Severity: Critical Date : 2021-04-29 CVE-ID : CVE-2021-22205 CVE-2021-28965 Package : gitlab Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1822 Summary ======= The package gitlab...
VulnCheck KEV: CVE-2020-10148
SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands...
China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞
China Mobile An Lianbao WF-1 router is a router from China Mobile China. China Mobile An Lianbao WF-1 router 1.0.1 suffers from an operating system command injection vulnerability, which originates in api/zrDm/setZRElink, that can be exploited by remote attackers to execute arbitrary commands via...
Exploit for Incorrect Authorization in Moodle
Python script to exploit CVE-2020-14321https://moodle.org/mod...
IBM Spectrum Scale Injection Vulnerability
IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...
CVE-2021-29667
IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403...
Command Execution Vulnerability in Renzihang Cloud Ops Security Audit System
RENZHOU Cloud O&M Security Audit System is a powerful support platform for enterprise and public utility IT systems' internal pre-prevention, mid-monitoring, and post-auditing. A command execution vulnerability exists in RENZIHANG Cloud O&M Security Audit System, which can be exploited by attacke...
Apache Druid 0.20.0 Remote Command Execution Exploit
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests; however, that feature is disabled by default. In Druid versions prior to 0.20.1, an authenticated user can send a specially-crafted request that both enables the JavaScript...
Apache Druid 0.20.0 Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Druid 0.20.0 Remote Command Execution', 'Description' = %q Apache Druid includes the ability to execute user-provided JavaScript code...
PHPGurukul Online Book Store SQL Injection Vulnerability
PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store version 1.0 that could allow a remote attacker to execute arbitrary SQL commands and bypass authentication...
CVE-2021-20696
DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program...
Webmin <= 1.973 Multiple Vulnerabilities
Webmin is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Webmin Cross-Site Request Forgery Vulnerability (CNVD-2021-31908)
Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A cross-site request forgery vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin's ru...
Webmin cross-site scripting vulnerability (CNVD-2021-31909)
Webmin is a Web-based system configuration tool for Unix-like systems, and the latest version can also be installed and run on Windows. A reflective cross-site scripting vulnerability exists in Webmin version 1.973. The vulnerability can be exploited to achieve remote command execution via Webmin...
