1934 matches found
Cisco NX-OS Improper Encoding or Escaping of Output (CVE-2017-12340)
A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash...
GHSA-49CC-XRJF-9QF7 SFTPGo allows administrators to restrict command execution from the EventManager
Impact One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in all software similar to SFTPGo and is generally unrestricted. However, any SFTPGo administrator with permission to run a...
grub2 security vulnerabilities
grub2 is a Linux system boot program from the American GNU community. A security vulnerability exists in grub2 that originates from allowing an attacker with access to the grub shell to access files on an encrypted disk...
RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:2927)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2927 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...
CVE-2024-48700
Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the editpage.php component...
CVE-2024-48459
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. Jixiang Tenda v.DI7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and...
CVE-2024-48459: Improper Neutralization of Special Elements used in an OS Command
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. Jixiang Tenda v.DI7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and...
PT-2024-33184 · Unknown · Kliqqi-Cms
Name of the Vulnerable Software and Affected Versions: Kliqqi-CMS affected versions not specified Description: The issue allows attackers to execute arbitrary code in the background, potentially leading to the implantation of backdoors or gaining shell access. This is achieved through exploitatio...
Kliqqi CMS security vulnerability
Kliqqi CMS Pligg CMS is a content management system from Kliqqi open source. A security vulnerability exists in Kliqqi CMS. By exploiting this vulnerability, an attacker can plant a backdoor or getShell via the editpage.php component...
CVE-2024-48459
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) , specifically affecting version DI_7003G-19.12.24A1V16.03.29.50 (and variants). The root cause is an OS command injection vulnerability where an attacker can constr...
PT-2024-33119 · Ax2 Pro · Ax2 Pro
Name of the Vulnerable Software and Affected Versions: AX2 Pro home router version DI 7003G-19.12.24A1V16.03.29.50 Description: A command execution issue exists, allowing an attacker to construct a malicious payload and execute commands. This can lead to obtaining shell access to the router's fil...
CVE-2024-48459
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. Jixiang Tenda v.DI7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and...
Kubernetes Image Builder Hard-coded Credentials
The vulnerability of the Kubernetes Image Builder software relates to the use of strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the virtual machine via SSH connection and elevate their privileges to root level...
Kubernetes Image Builder Hard-coded Credentials
The vulnerability of the Kubernetes Image Builder software relates to the use of strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the virtual machine via SSH connection and elevate their privileges to root level...
PT-2024-33380
Name of the Vulnerable Software and Affected Versions Shafiq Digital Lottery versions 3.0.5 and earlier Description The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized access to...
Juniper Networks Junos OS Evolved security vulnerabilities
Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved that stems from a user control key bypass authorization vulnerability that allows a local authenticated attacker with shell access to take...
Exploit for Code Injection in Extron Smp_111_Firmware
!alt texthttps://github.com/layer8secure/extron-smp-inject/bl...
Simple College Website 1.0 Shell Upload
============================================================================================================================================= | Title : Simple College Website 1.0 code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 129.0...
PT-2024-7151 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 21.2R3-S8-EVO Juniper Networks Junos OS Evolved versions from 21.4-EVO prior to 21.4R3-S8-EVO Juniper Networks Junos OS Evolved versions from 22.2-EVO prior to 22.2R3-S4-EVO Juniper Networks...