CVE-2021-44093

A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file to get a WebShell...

CVE-2021-44093

CVE-2021-44093 affects zrlog 2.2.2. A Remote Command Execution vulnerability exists in the avatar upload function, allowing bypass of the original limit and uploading a JSP file to obtain a WebShell. Multiple sources (NVD/NVDC, CNVD, Red Hat, CNVD, CNNVD, CVE listing) corroborate the issue and it...

CVE-2021-44094: Unrestricted Upload of File with Dangerous Type

ZrLog 2.2.2 has a remote command execution vulnerability at plugin download function, it could execute any JAR file...

PT-2021-24038

Name of the Vulnerable Software and Affected Versions: zrlog version 2.2.2 Description: A Remote Command Execution issue exists in the upload avatar function, allowing an attacker to bypass original limits, upload a JSP file, and obtain a WebShell. Recommendations: For zrlog version 2.2.2, as a...

PT-2021-24039

Name of the Vulnerable Software and Affected Versions: ZrLog version 2.2.2 Description: The issue is related to a remote command execution vulnerability in the plugin download function. This vulnerability allows the execution of any JAR file. Recommendations: For ZrLog version 2.2.2, as a tempora...

CVE-2021-44093: Unrestricted Upload of File with Dangerous Type

A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file to get a WebShell...

CVE-2021-38685: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

CVE-2021-38873

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396...

CVE-2021-20850

PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series End-of-Life, EOL allows a remote attacker to execute an arbitrary OS command via unspecified vectors...

CVE-2021-38873: Improper Neutralization of Special Elements in Output Used by a Downstream Component

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396...

CVE-2021-36313

Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

XStream: remote command execution attack by manipulating the processed input stream

A flaw was found in XStream. By manipulating the processed input stream, a remote attacker may be able to obtain sufficient rights to execute commands. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry

A flaw was found in xstream. A remote attacker, who has sufficient rights, can execute commands of the host by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

GNU gdbserver 9.2 - Remote Command Execution Exploit

Exploit Title: GNU gdbserver 9.2 - Remote Command Execution RCE Exploit Author: Roberto Gesteira Miñarro 7Rocky Vendor Homepage: https://www.gnu.org/software/gdb/ Software Link: https://www.gnu.org/software/gdb/download/ Version: GNU gdbserver Ubuntu 9.2-0ubuntu120.04 9.2 Tested on: Ubuntu Linux...

GNU gdbserver 9.2 - Remote Command Execution (RCE)

Exploit Title: GNU gdbserver 9.2 - Remote Command Execution RCE Date: 2021-11-21 Exploit Author: Roberto Gesteira Miñarro 7Rocky Vendor Homepage: https://www.gnu.org/software/gdb/ Software Link: https://www.gnu.org/software/gdb/download/ Version: GNU gdbserver Ubuntu 9.2-0ubuntu120.04 9.2 Tested...

CVE-2021-37102: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful...

Efm Networks IpTime C200 Camera security vulnerability

The Efm Networks IpTime C200 Camera is a webcam from the Korean company Efm Networks. The Efm Networks IpTime C200 Camera suffers from a security vulnerability that allows a remote attacker to send crafted parameters to an exposed web service interface that can invoke arbitrary shell commands...

Backdoor.Win32.Antilam.11 Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/290477c9707f64a316888493ae67b1ef.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Antilam.11 Vulnerability: Unauthenticated Remote Command Execution Description: The...

PT-2021-8063

Name of the Vulnerable Software and Affected Versions Siemens LOGO affected versions not specified Description The issue is related to a lack of authentication for a critical function in the embedded software of Siemens LOGO programmable logic controllers. This could allow a remote attacker to...

IBM Data Risk Manager Arbitrary Command Execution

The vulnerability of the IBM Data Risk Manager application for identifying, analyzing, and visualizing business risks is related to the failure to take measures to neutralize specific elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrar...