CVE-2020-13851

CVE-2020-13851 affects Artica Pandora FMS 7.44, enabling remote command execution via the Events feature. The underlying cause is a command-injection vulnerability in Events that could allow unauthenticated attackers to run arbitrary commands, potentially taking control of the Pandora FMS server ...

CVE-2020-13851

Artica Pandora FMS 7.44 allows remote command execution via the events feature...

CVE-2020-13852

Pandora FMS 7.44 is affected by CVE-2020-13852 due to a flaw in the File Manager that allows uploading a PHP web shell to a restricted directory, enabling remote command execution as the apache user. The accompanying advisory details multiple related vectors (_arbitrary file upload in File Manage...

CVE-2020-13852

Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Manager feature...

CVE-2020-13855

Artica Pandora FMS 7.44 allows arbitrary file upload leading to remote command execution via the File Repository Manager feature...

CVE-2020-13855

Pandora FMS 7.44 is affected by CVE-2020-13855 (File Repository Manager) which allows an administrator to upload a PHP web shell to a publicly accessible folder, enabling execution of system commands with the apache user. The vulnerability is demonstrated via an uploaded web shell and subsequent ...

LinuxKI Toolset 6.01 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LinuxKI Toolset 6.01 Remote Command Execution', 'Description' = %q This module exploits a vulnerability in LinuxKI Toolset MSFLICENSE, 'Author' =...

The vulnerability of Huawei’s microprogrammed router software, related to authentication deficiencies, allows attackers to execute arbitrary commands.

The vulnerability of Huawei’s microprogrammed router software is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

CVE-2020-13976

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation through CSRF might be possible. NOTE: software maintainers consider the report invalid because it...

CVE-2020-12773

The CVE concerns Realtek ADSL/PON Modem SoC firmware SDK with a security misconfiguration that allows remote command execution via a built-in network monitoring tool. An attacker can exploit a default password to gain arbitrary command execution, compromising confidentiality, integrity, and avail...

VulnCheck KEV: CVE-2018-19949

A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands...

Pandora FMS Events Remote Command Execution

This module exploits a vulnerability CVE-2020-13851 in Pandora FMS versions 7.0 NG 742, 7.0 NG 743, and 7.0 NG 744 and perhaps older versions in order to execute arbitrary commands. This module takes advantage of a command injection vulnerability in the Events feature of Pandora FMS. This flaw...

CVE-2020-7117

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...

CVE-2020-7115

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF...

CVE-2020-7116

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...

CVE-2020-7115

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF...

CVE-2020-7115

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF...

Authentication flaw

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF...

CVE-2020-7115

CVE-2020-7115 affects Aruba Networks ClearPass Policy Manager web interface. The issue enables an authentication bypass which, once bypassed, could allow an attacker to perform an unauthenticated remote code execution on the underlying system. Public sources describe this as a remote code executi...

CVE-2020-7115

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF...