15767 matches found
UBUNTU-CVE-2013-7381
libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify...
CVE-2013-2097
CVE-2013-2097 affects ZPanel up to version 10.1.0, with remote command execution reportedly possible without authentication. Multiple sources corroborate that the issue involves ZPanel and a vulnerable component (pChart), enabling an attacker to read files or execute code on the server. The Red H...
CVE-2013-2097
ZPanel through 10.1.0 has Remote Command Execution...
DEBIAN-CVE-2014-9390
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before...
PYSEC-2020-217
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before...
CVE-2014-9390
CVE-2014-9390 describes a remote command-execution risk in Git and several VCS clients when interacting with repositories on case-insensitive filesystems. A crafted .git/config in a tree can trigger arbitrary commands on the server/client, depending on the tool. Affected versions (per provided so...
Command Execution Vulnerability in Kingdee K3WISE Innovation Management Platform
Kingdee K3WISE Innovation Management Platform is a latest Kingdee K3WISE. A command execution vulnerability exists in Kingdee K3WISE Innovation Management Platform. An attacker can exploit the vulnerability to remotely execute commands and gain server privileges...
CVE-2013-4267
Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 archivename parameter to the Power FS module plugins/action.powerfs/class.PowerFSController.php, a 2 file name to the getTrustSizeOnFileSystem function in the File System Standard modu...
CVE-2013-4267
Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 archivename parameter to the Power FS module plugins/action.powerfs/class.PowerFSController.php, a 2 file name to the getTrustSizeOnFileSystem function in the File System Standard modu...
CVE-2013-4267
Ajaxeplorer prior to 5.0.1 is affected by CVE-2013-4267, enabling remote command execution via shell metacharacters in three parameters: (1) archive_name for the Power FS module, (2) a file name to getTrustSizeOnFileSystem in the File System (Standard) module, and (3) revision in the Subversion R...
OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution
Exploit Title: OpenSMTPD 6.6.1 - Local Privilege Escalation Date: 2020-02-02 Exploit Author: Marco Ivaldi Vendor Homepage: https://www.opensmtpd.org/ Version: OpenSMTPD 6.4.0 - 6.6.1 Tested on: OpenBSD 6.6, Debian GNU/Linux bullseye/sid with opensmtpd 6.6.1p1-1 CVE: CVE-2020-7247 !/usr/bin/perl...
D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link Devices Unauthenticated Remote Command Execution in ssdpcgi', 'Description' = %q D-Link Devices Unauthenticated Remote Command Execution i...
D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link Devices Unauthenticated Remote Command Execution in ssdpcgi', 'Description' = %q D-Link Devices Unauthenticated Remote Command Execution i...
CVE-2020-6760
Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu, as demonstrated by ping...
CVE-2020-6754
dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCATHOME/webapps/ROOT/assets which should be a protected directory. Additionally, attackers can upload temporary files e.g., .jsp files into...
CVE-2020-6754
dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCATHOME/webapps/ROOT/assets which should be a protected directory. Additionally, attackers can upload temporary files e.g., .jsp files into...
Directory traversal
dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCATHOME/webapps/ROOT/assets which should be a protected directory. Additionally, attackers can upload temporary files e.g., .jsp files into...
CVE-2020-6754
CVE-2020-6754 affects dotCMS prior to 5.2.4. The vulnerability is a directory traversal due to insufficient path validation in the CMSFilter, allowing an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/assets and to upload temporary files (e.g., .jsp) into /webapps/ROOT/assets/t...
CVE-2020-6754
dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCATHOME/webapps/ROOT/assets which should be a protected directory. Additionally, attackers can upload temporary files e.g., .jsp files into...