CVE-2021-33533

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iwwebs functionality. A specially crafted iwserverip parameter can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. ...

PT-2021-11180

Name of the Vulnerable Software and Affected Versions: Accfly Wireless Security IR Camera 720P System versions v3.10.73 through v4.15.77 Description: An issue was discovered in the Accfly Wireless Security IR Camera 720P System, where there is an unauthenticated stack-based buffer overflow in the...

CVE-2020-15426

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmigrationcpanel.php. When parsing the serverip parameter, the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmigrationcpanel.php. When parsing the serverip parameter, the...

CVE-2020-15426: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxmigrationcpanel.php. When parsing the serverip parameter, the...

PT-2020-1752

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A firmware version 1.13 Description A command injection vulnerability exists in the iw webs functionality, allowing an attacker to gain remote control over the device. This can be achieved by sending specially crafted commands,...

PT-2019-4577

Name of the Vulnerable Software and Affected Versions Moxa AWK-3121 version 1.14 Description An issue was discovered that allows an attacker to execute commands on the device. The iw serverip parameter is susceptible to buffer overflow, which can be exploited by crafting a packet with a string of...

PT-2019-8305

Name of the Vulnerable Software and Affected Versions ZyXEL P660HN-T1A v2 version 7.3.37.6 Description The issue is related to a command injection vulnerability in the Remote System Log forwarding function of the router. This function is accessible only by an authenticated user. The vulnerability...

CVE-2017-18370: Improper Neutralization of Special Elements used in an OS Command

The ZyXEL P660HN-T1A v2 TCLinux Fw 7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP...

ZyXEL P660HN-T v2 Router Unauthenticated Remote Command Execution Vulnerability

The ZyXEL P660HN-T v2 is a router manufactured by Hutchinson Technology. The ZyXEL P660HN-T v2 router suffers from an unauthenticated remote command execution vulnerability. Command injection in the ServerIP parameter and the presence of a default account on the device allow an attacker to exploi...

SPlayer 3.7 Buffer Overflow

!/usr/bin/python Exploit Title: SPlayer Software Link: http://www.splayer.org/index.en.html Versions: URL ctrl+u ... 3. Input the server URL and Click OK ... 4. Boom!/calc ... Method 2: 1. Execute this script ... 2. Launch SPlayer and click Open ctrl+o ... 3. Browse to any playlist file m3u, pls ...

Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani

---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Years Old My Official Website :...

cpanel 11.x XSS / Local File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Year...

cPanel 11.x - Cross-Site Scripting Local File Inclusion

cPanel 11.x - Cross-Site Scripting Local File Inclusion ---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar...

cPanel 11.x - Cross-Site Scripting / Local File Inclusion

---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Years Old My Official Website :...