The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec is related to improper code generation control. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

CVE-2020-3470 Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could...

Design/Logic Flaw

httpd on TP-Link TL-WPA4220 devices versions 2 through 4 allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220EUV4201023...

Cisco DNA Spaces 操作系统命令注入漏洞

Cisco DNA Spaces: Connector is used to connect Cisco DNA Spaces to a Cisco wireless controller. A command injection vulnerability exists in the Web management interface of the Cisco DNA Spaces Connector version 2.2 and earlier. The vulnerability stems from insufficient validation of user-supplied...

The vulnerability of the application for extending HEVC Video Extensions is related to errors in code generation, allowing a perpetrator to execute arbitrary code.

The vulnerability of the application for extending HEVC Video Extensions is related to errors in code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Multiple Industrial Control System Vendors Warn of Critical Bugs

Industrial control system firms Real Time Automation and Paradox both warned of critical vulnerabilities Tuesday that opened systems up to remote attacks by adversaries. Flaws are rated 9.8 out of 10 in severity by the industry standard Common Vulnerability Scoring System. The Real Time Automatio...

CVE-2020-27131

Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied content by the...

Paradox IP150 Buffer Error Vulnerability

Paradox IP150 is a communication module from Paradox Corporation of the United States that provides monitoring and management of Paradox devices over the Internet. The module provides a web interface to monitor and manage connected Paradox devices. A buffer error vulnerability exists in Paradox...

CVE-2020-27131

Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. These vulnerabilities are due to insecure deserialization of user-supplied content by the...

HorizontCMS Code Injection Vulnerability

HorizontCMS is a customer relationship management web platform for individual developers. A code injection vulnerability exists in the HorizontCMS product, which can be exploited by remote attackers to execute arbitrary PHP code by uploading a PHP payload...

Zimbra Collaboration Server < 8.8.15 P10 / 9.x < 9.0.0 P3 Unrestricted Upload

According to its self-reported version number, Zimbra Collaboration Server is below 8.8.15 Patch 10, or 9.x prior to 9.0.0 Patch 3. It is, therefore, affected by an unrestricted upload vulnerability in the '/service/upload' servlet. An authenticated, remote attacker can exploit this, by uploading...

CVE-2020-24719

Exposed Erlang Cookie could lead to Remote Command Execution RCE attack. Communication between Erlang nodes is done by exchanging a shared secret aka "magic cookie". There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlan...

CVE-2020-27386

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code e.g., ASP code in the form of a safe file type e.g., a TXT file, and then using the FileEditor in v1.5.8...

Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability...

Salt: Multiple vulnerabilities

Background Salt is a remote execution and configuration manager. Description Multiple vulnerabilities have been discovered in Salt. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

Vulnerabilities fixed in Microsoft Windows

There are several vulnerabilities in Microsoft Windows. The vulnerabilities allow a malicious party to execute arbitrary execute arbitrary code with user and elevated privileges, to potentially obtain sensitive data or launch a denial-of-service attack execute. Microsoft scales the vulnerability...

WordPress File Manager 6.8 Remote Code Execution Exploit

The WordPress File Manager wp-file-manager plugin versions 6.0 through 6.8 allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload or...

Microsoft SharePoint Remote Code Execution (CVE-2020-17061)

A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2022-5110 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle versions affected versions not specified Description: A limited SQL injection risk was identified in the "browse list of users" site administration page. The vulnerability is related to insufficient cleaning of user data on this page...

[SECURITY] Fedora 31 Update: salt-3001.3-1.fc31

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...