Vesta Control Panel Input Validation Error Vulnerability

Vesta Control Panel VestaCP is an open source web hosting control panel. A security vulnerability exists in Vesta Control Panel 0.9.8-26 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary commands on the system with the help of the cron jobs module...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

Command injection

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

CVE-2020-10786

CVE-2020-10786 affects Vesta Control Panel (VestaCP) w/ versions 0.9.8-26 and earlier. A remote command execution is possible because an authenticated user can abuse the cron jobs module to run arbitrary commands on the underlying system. Impact is high (remote, unauthenticated? actually authenti...

CVE-2020-10786

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs...

Sysaid 20.1.11 b26 Remote Command Execution Vulneravility

Sysaid version 20.1.11 b26 suffers from an AJP13 remote command execution vulnerability. Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution Google Dork: intext:"Help Desk Software by SysAid " Exploit Author: Ahmed Sherif Vendor Homepage: https://www.sysaid.com/free-help-desk-software...

Sysaid 20.1.11 b26 Remote Command Execution

Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution Google Dork: intext:"Help Desk Software by SysAid " Date: 2020-03-09 Exploit Author: Ahmed Sherif Vendor Homepage: https://www.sysaid.com/free-help-desk-software Software Link: https://www.sysaid.com/free-help-desk-software Version:...

NETGEAR R7800 Command Injection Vulnerability (CNVD-2020-23423)

The NETGEAR R7800 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.62. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during the construction of...

NETGEAR D3600, D6000 and XR500 Operating System Command Injection Vulnerability

The NETGEAR D3600 is a wireless modem from NETGEAR. An operating system command injection vulnerability exists in the NETGEAR D3600 prior to version 1.0.0.76, the D6000 prior to version 1.0.0.76, and the XR500 prior to version 2.3.2.32. The vulnerability stems from the fact that during the proces...

NETGEAR WAC505 and WAC510 Operating System Command Injection Vulnerability (CNVD-2020-27299)

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. An operating system command injection vulnerability exists in the NETGEAR WAC505 before 5.0.10.2 and WAC510 before 5.0.10.2, which can be exploited by an attacker to execute illegal operating system commands,...

CVE-2020-11811

In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file...

Exploit for Expression Language Injection in Sonatype Nexus

PoC exploit for CVE-2020-10199, a remote code execution vulnerab...

CVE-2020-10514

iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command...

CVE-2020-6219

SAP Business Objects Business Intelligence Platform CrystalReports WebForm Viewer, versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service a...

CVE-2020-5739

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field in the web interface. When the VPN's connection is established, the user defin...

CVE-2020-5739

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field in the web interface. When the VPN's connection is established, the user defin...

CVE-2020-5738

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/uploadvpntar interface...

CVE-2020-5738

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/uploadvpntar interface...

Design/Logic Flaw

Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field in the web interface. When the VPN's connection is established, the user defin...