926 matches found
Cisco IOS XE Software HTTP API Command Injection (cisco-sa-ios-xe-cmd-inject-rPJM8BGL)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. This vulnerability is due to insufficient input validation. An attacker with administrative privileges could exploit this vulnerability by authenticating to an affected system and performing an API call...
CVE-2025-8432 CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON
Incorrect Default Permissions vulnerability in Centreon Infra Monitoring MBI modules allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 24.04.9, from 23.10.0 before 23.10.15...
Reolink Video Doorbell WiFi DB_566128M5MP_W security vulnerability
Reolink Video Doorbell WiFi DB566128M5MPW is a visual doorbell from Reolink USA. A security vulnerability exists in Reolink Video Doorbell WiFi DB566128M5MPW, which originates from an unprotected UART serial console, and could allow a physically accessible attacker to execute arbitrary commands...
CVE-2025-41699
Phoenix Contact CHARX SEC-3xxx charging controllers are affected by CVE-2025-41699. The vulnerability is a code injection (CWE-94) that an attacker with a low-privileged remote account for the Web-based management can exploit to change system configuration and perform a root command injection, co...
CVE-2025-41699: Improper Control of Generation of Code
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code 'Code Injection'...
EUVD-2016-10792
AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...
CVE-2016-15047
AVTECH IP cameras, digital video recorders (DVR), and network video recorders (NVR) are vulnerable to authenticated OS command injection via the CloudSetup.cgi management endpoint. The root cause is the lack of proper validation or whitelisting for the exefile parameter, which is passed directly ...
EUVD-2019-6114
Malware in sbrugna...
EUVD-2018-12039
Malware in sbrugna...
EUVD-2020-12479
Malware in sbrugna...
EUVD-2020-24482
Malware in sbrugna...
EUVD-1999-0163
Malware in sbrugna...
EUVD-2017-4149
Malware in sbrugna...
EUVD-2017-15291
Malware in sbrugna...
EUVD-2017-18429
Malware in sbrugna...
EUVD-2018-12731
Malware in sbrugna...
EUVD-2018-0821
Malware in sbrugna...
EUVD-2025-31037
Malicious code in bioql PyPI...