Siemens RUGGEDCOM ROX 系列命令注入漏洞

RUGGEDCOM products provide a level of robustness and reliability that sets the standard for communication networks deployed in harsh environments. Siemens RUGGEDCOM ROX has a command injection vulnerability that could be exploited by an attacker with administrator privileges to access the shell o...

CVE-2022-32411

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...

HongCMS 安全漏洞

HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS v3.0 that stems from an issue in the language configuration file that allows an attacker to obtain a shell...

HongCMS 安全漏洞

HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS v3.0, which stems from an issue in the /template/edit component that allows an attacker to obtain a shell...

RCE due to Improper Authorization in 'Add Extension' functionality

Description The application does not properly implement authorization checks in the add extension functionality and allows a low-privileged user to upload extensions. Since no approval/verification is required to create an account in the application, any unauthenticated attacker can create a...

CVE-2022-2104

The www-data Apache web server account is configured to run sudo with no password for many commands including /bin/sh and /bin/bash...

Zyxel Firewall SUID Binary Privilege Escalation

This module exploits CVE-2022-30526, a local privilege escalation vulnerability that allows a low privileged user e.g. nobody escalate to root. The issue stems from a suid binary that allows all users to copy files as root. This module overwrites the firewall's crontab to execute an attacker...

CVE-2021-33014 KUKA KR C4 - Use of Hard-Coded Credentials

An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS...

PT-2022-19565

Name of the Vulnerable Software and Affected Versions Phpok version 6.1 Description The issue is related to a deserialization vulnerability via the update f function in login control.php. This allows attackers to write arbitrary files, potentially leading to getting shell access. Recommendations...

Tenda AX12 缓冲区错误漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.Tenda AX12 is vulnerable to a buffer overflow vulnerability, which originates from the /goform/setMacFilterCfg function in the httpd service that does not properly validate data boundaries when performing operations on...

PT-2022-19079

Name of the Vulnerable Software and Affected Versions Tenda ac9 version 15.03.2.21 cn Description The issue is related to a stack overflow vulnerability in the goform/fast setting wifi set function within the httpd service. This vulnerability allows an attacker to obtain a stable shell through a...

CVE-2022-27506

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI...

CVE-2022-27506

CVE-2022-27506 is a hard-coded credentials flaw that allows administrators to access the SD-WAN shell via the CLI. The issue affects Citrix SD-WAN Center Management Console (before 11.4.3), Citrix SD-WAN Standard/Premium Edition Appliance (before 11.4.1), and Citrix SD-WAN Orchestrator for On-Pre...

Citrix SD-WAN 信任管理问题漏洞

Citrix SD-WAN is a networking product from Citrix, Inc. It virtualizes and optimizes enterprise site-to-site networks. A security vulnerability exists in Citrix SD-WAN that stems from hard-coded credentials that allow administrators to access the shell via the SD-WAN CLI...

PT-2022-18462

Name of the Vulnerable Software and Affected Versions SD-WAN affected versions not specified Description The issue allows administrators to access the shell via the SD-WAN CLI using hard-coded credentials. Recommendations At the moment, there is no information about a newer version that contains ...

CVE-2022-27506: Use of Hard-coded Credentials

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI...

CVE-2022-27506

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI...

CVE-2021-24009

Multiple improper neutralization of special elements used in an OS command vulnerabilities CWE-78 in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Docker $ sudo docker build -t . $ sudo...

PT-2022-13166 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: gogs versions prior to 0.12.6 Description: The issue allows a malicious user to upload a crafted config file into a repository's .git directory to gain SSH access to the server. This affects all installations with repository upload enabled,...