CVE-2016-8590

logquerydlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...

CVE-2017-2096

CVE-2017-2096 affects smalruby-editor before 0.4.1 and smalruby before 0.1.11, enabling remote arbitrary OS command execution. Root cause cited across sources: improper handling/sanitization in command execution (e.g., Open3.capture3) leading to command injection. Affected products: smalruby-edit...

CVE-2017-2112

TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlie...

Easy File Uploader - Arbitrary File Upload

Exploit Title: Easy File Uploader - Arbitrary File Upload Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 Tested on: GNU/Linux GREETZ: Rodrigo...

Stack Overflow Vulnerability in the InitialSDK Method of the SoftNVR-IA NVRLV Control for Mosaic Video Surveillance Systems

Mosa Video Surveillance System SoftNVR-IA is a real-time IP video surveillance software developed by Mosa Technology Shanghai Co. A stack overflow vulnerability exists in the InitialSDK method of the NVRLV control of Mosa Video Surveillance System SoftNVR-IA. By tricking the user into visiting a...

CVE-2017-8291

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile %pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017...

Mura CMS Multiple Vulnerabilities

Mura CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:blueriver:muracms"; if description...

CVE-2017-5030

Removed by vendor...

CVE-2016-6902

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands...

CVE-2016-6903

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands...

CVE-2016-4313

Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. dot dot in an archive file...

CVE-2016-4313

Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. dot dot in an archive file...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the ActionScript2 NetStream component in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Foxit Reader Annotations lock Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Annotation object's...

Dozens of Linksys Router the exposed high-risk vulnerability can lead to remote command execution and sensitive information disclosure-vulnerability warning-the black bar safety net

! From the IOACTIVE researchers recently discovered the presence in the Linksys smart Wifi Router vulnerabilities. Researchers last year purchased a Linksys EA3500 series smart router. This brand before belonging to Cisco, and now belongs to Belkin's, in the Asian Regional market usage is small...

CVE-2016-1555

1 boardData102.php, 2 boardData103.php, 3 boardDataJP.php, 4 boardDataNA.php, and 5 boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands. Recent assessments: Assessed...

Code injection

Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers...

CVE-2016-4293

Multiple heap-based buffer overflows in the 1 CBookBase::SetDefTableStyle and 2 CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document .cell file...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the IOATAFamily component in the Mac OS X operating system arises from an operation that occurs outside the buffer boundaries on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context remotely, or to trigger a servi...

FFmpeg Heap Buffer Overflow Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of an affected application...