EUVD-2020-25488

IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM...

Paessler PRTG Network Monitor webserver component input validation error vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A security vulnerability exists in the webserver component of Paessler PRTG Network Monitor version 19.2.50 through PRTG version 20.1.56. A remote attacker could exploit the...

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

Command injection

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

CVE-2020-10374

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...

CVE-2020-10374

The CVE-2020-10374 affects Paessler PRTG Network Monitor (webserver component) from version 19.2.50 up to 20.1.56, enabling unauthenticated remote command execution via a crafted POST request or via the what parameter of the Contact Support form’s screenshot function. This is a remote, network-ac...

The vulnerability of the MOXA EDR-810 industrial router’s web server lies in the lack of a mechanism for filtering specific symbols, allowing attackers to execute arbitrary commands.

The vulnerability of the MOXA EDR-810 industrial router’s web server is related to the absence of a mechanism for filtering specific characters. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted requests to the web server...

The vulnerability of the docker-compose-remote-api package from the package manager NPM allows a attacker to execute arbitrary commands.

The vulnerability of the docker-compose-remote-api package from the package manager NPM is related to insufficient validation of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system remotely...

CVE-2020-5560

WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors...

CVE-2020-5561

Keijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2020-5556

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

WL Enq Operating System Command Execution Vulnerability

The WonderLink WL-Enq is a CGI Common Gateway Interface that provides network survey functionality. A security vulnerability exists in WonderLink WL-Enq versions 1.11 and 1.12. A remote attacker could exploit the vulnerability to execute arbitrary operating system commands with administrative...

LILIN DVR Remote Command Execution Vulnerability

Founded in 1988, LILIN ⼴州利凌電⼦有限公司 is one of China's first producers to engage in the research, development and manufacture of security products. A remote command execution vulnerability exists in LILIN DVRs, which can be exploited by a remote attacker to execute arbitrary commands on the target...

Terramaster Remote Command Execution (CVE-2018-13338; CVE-2018-13330; CVE-2018-13336)

A remote command execution vulnerability exists in Terramaster. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

netkit telnetd nextitem vulnerability

Added: 03/24/2020 Background netkit telnetd is a server implementation of the Telnet protocol which comes with many Linux and Unix operating systems. Problem An unbounded read and write condition in the nextitem function allows remote attackers to execute arbitrary commands on the server...

CVE-2020-10818

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field...

CVE-2020-10818

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field...

CVE-2020-10818

Artica Proxy 4.26 contains a vulnerability that allows remote command execution by an authenticated user via shell metacharacters in the “Modify the hostname” field. Root cause: improper handling of shell metacharacters in hostname-related input. CVE-2020-10818 is referenced in NVD with CVSS2 bas...

CVE-2019-19148

Tellabs Optical Line Terminal OLT 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020...

CVE-2019-19148

Tellabs Optical Line Terminal OLT 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020...