PT-2020-6319 · Vbulletin · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin versions 5.5.4 through 5.6.2 Description: The issue allows remote command execution via crafted subWidgets data in an "ajax/render/widget tabbedcontainer tab panel" request. This is due to an incomplete fix for a previous issue. The...

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, arises from the lack of measures taken to eliminate special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary commands.

The software platform for managing virtual environments, CloudForms Management Engine, is vulnerable due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotel...

The vulnerability of the PAN-OS operating system’s management interface allows a perpetrator to execute arbitrary operating system commands with root privileges.

The vulnerability of the PAN-OS operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands with root privileges...

Exploit for OS Command Injection in Webmin

CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your...

Code Injection Vulnerability in Destoon B2B Website Management System Backend co***.in***.php File

DESTOON B2B website management system is a PHP MySQL based open source B2B e-commerce industry portal solution. Destoon B2B website management system backend co.in.php file has a code injection vulnerability. An attacker can exploit the vulnerability to remotely execute commands...

Command Execution Vulnerability in Tenda G1 Router of Shenzhen Jixiang Tenda Technology Co.

The Tenda G1 is an enterprise-class AP management router with a 100-person bandwidth. A command execution vulnerability exists in the Tenda G1 router of Shenzhen Jixiang Tenda Technology Company Limited, which can be exploited by an attacker to remotely execute commands...

Command Execution Vulnerability in Tenda G3 Router of Shenzhen Jixiang Tenda Technology Co.

Tenda G3 Road is an enterprise-class AP management router with 200 users, providing efficient, secure and easily scalable networks for small and medium-sized businesses, restaurants and hotel chains. Shenzhen Jixiang Tenda Technology Co., Ltd Tenda G3 router has a command execution vulnerability...

jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Cisco Small Business RV Series RCE (cisco-sa-rv-rce-m4FEEGWX)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by an remote command execution RCE vulnerability due to improper validation of user data. An authenticated remote attacker can exploit this, via HTTP requests, to execute arbitrary code with high...

jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Aruba ClearPass Policy Manager <= 6.6.10 / 6.7.x < 6.7.6 Multiple Vulnerabilities

The version of Aruba ClearPass Policy Manager installed on the remote host is equal or prior to 6.6.10, or 6.7.x prior to 6.7.6. It is, therefore, affected by multiple vulnerabilities: - An XML external entity XXE vulnerability exists due to an incorrectly configured XML parser accepting XML...

eGroupWare 1.14 Remote Command Execution

Exploit Title: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution Date: 2020-07-27 Exploit Author: Berk KIRAS Vendor Homepage: https://www.egroupware.org/en/ Version: 1.14 Tested on: Apache Berk KIRAS PwC - Cyber Security Specialist !/usr/bin/python3 import requests import sys import...

eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution

Exploit Title: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution Date: 2020-07-27 Exploit Author: Berk KIRAS Vendor Homepage: https://www.egroupware.org/en/ Version: 1.14 Tested on: Apache Berk KIRAS PwC - Cyber Security Specialist !/usr/bin/python3 import requests import sys import...

eGroupWare 1.14 - (spellchecker.php) Remote Command Execution Exploit

Exploit for php platform in category web applications Exploit Title: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution Exploit Author: Berk KIRAS Vendor Homepage: https://www.egroupware.org/en/ Version: 1.14 Tested on: Apache Berk KIRAS PwC - Cyber Security Specialist !/usr/bin/python...

Command Execution Vulnerability in SSL VPN of Deepcom Technology Corporation (CNVD-2020-48679)

SSL VPN is a kind of VPN technology provided by SZSS to solve the problem of remote users accessing sensitive company data to realize remote access. A command execution vulnerability exists in the SSL VPN of DeepSync, which can be exploited by an attacker to execute arbitrary commands to gain...

CVE-2020-15916

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter...

CVE-2020-10921

This CVE affects C-MORE HMI EA9 touch screen panels running firmware 6.52. The flaw is in the EA-HTTP.exe process and stems from a lack of authentication, enabling remote attackers to issue commands to the physical device without credentials. Connected sources (ZDI advisory and NVD/Red Hat entrie...

Raining SYSTEM Shells with Citrix Workspace app

TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...

The vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130 VPN Routers, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to execute arbitrary operating system commands.

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130 VPN Routers, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers exists due to the failure to implement measures to neutralize specific elements used in the operating system’s command...