1934 matches found
Microweber code issues and vulnerabilities
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A code issue vulnerability exists in Microweber 1.1.3, which can be exploited by an...
CVE-2022-29560
A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions 2.15.1, RUGGEDCOM ROX MX5000RE All versions 2.15.1, RUGGEDCOM ROX RX1400 All versions 2.15.1, RUGGEDCOM ROX RX1500 All versions 2.15.1, RUGGEDCOM ROX RX1501 All versions 2.15.1, RUGGEDCOM ROX RX1510 All versions 2.15.1,...
Siemens RUGGEDCOM ROX series command injection vulnerability
RUGGEDCOM products provide a level of robustness and reliability that sets the standard for communication networks deployed in harsh environments. Siemens RUGGEDCOM ROX has a command injection vulnerability that could be exploited by an attacker with administrator privileges to access the shell o...
CVE-2022-29560: Improper Neutralization of Special Elements used in a Command
A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions 2.15.1, RUGGEDCOM ROX MX5000RE All versions 2.15.1, RUGGEDCOM ROX RX1400 All versions 2.15.1, RUGGEDCOM ROX RX1500 All versions 2.15.1, RUGGEDCOM ROX RX1501 All versions 2.15.1, RUGGEDCOM ROX RX1510 All versions 2.15.1,...
CVE-2022-32411
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...
HongCMS security vulnerabilities
HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS v3.0, which stems from an issue in the /template/edit component that allows an attacker to obtain a shell...
HongCMS security vulnerabilities
HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS v3.0 that stems from an issue in the language configuration file that allows an attacker to obtain a shell...
RCE due to Improper Authorization in 'Add Extension' functionality
Description The application does not properly implement authorization checks in the add extension functionality and allows a low-privileged user to upload extensions. Since no approval/verification is required to create an account in the application, any unauthenticated attacker can create a...
CVE-2022-2104
The www-data Apache web server account is configured to run sudo with no password for many commands including /bin/sh and /bin/bash...
Zyxel Firewall SUID Binary Privilege Escalation
This module exploits CVE-2022-30526, a local privilege escalation vulnerability that allows a low privileged user e.g. nobody escalate to root. The issue stems from a suid binary that allows all users to copy files as root. This module overwrites the firewall's crontab to execute an attacker...
CVE-2021-33014 KUKA KR C4 - Use of Hard-Coded Credentials
An attacker can gain VxWorks Shell after login due to hard-coded credentials on a KUKA KR C4 control software for versions prior to 8.7 or any product running KSS...
PT-2022-19565
Name of the Vulnerable Software and Affected Versions Phpok version 6.1 Description The issue is related to a deserialization vulnerability via the update f function in login control.php. This allows attackers to write arbitrary files, potentially leading to getting shell access. Recommendations...
Tenda AX12 buffer error vulnerability
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.Tenda AX12 is vulnerable to a buffer overflow vulnerability, which originates from the /goform/setMacFilterCfg function in the httpd service that does not properly validate data boundaries when performing operations on...
PT-2022-19079
Name of the Vulnerable Software and Affected Versions Tenda ac9 version 15.03.2.21 cn Description The issue is related to a stack overflow vulnerability in the goform/fast setting wifi set function within the httpd service. This vulnerability allows an attacker to obtain a stable shell through a...
CVE-2022-27506
Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI...
CVE-2022-27506
CVE-2022-27506 is a hard-coded credentials flaw that allows administrators to access the SD-WAN shell via the CLI. The issue affects Citrix SD-WAN Center Management Console (before 11.4.3), Citrix SD-WAN Standard/Premium Edition Appliance (before 11.4.1), and Citrix SD-WAN Orchestrator for On-Pre...
Citrix SD-WAN Trust Management Vulnerability
Citrix SD-WAN is a networking product from Citrix, Inc. It virtualizes and optimizes enterprise site-to-site networks. A security vulnerability exists in Citrix SD-WAN that stems from hard-coded credentials that allow administrators to access the shell via the SD-WAN CLI...
PT-2022-18462
Name of the Vulnerable Software and Affected Versions SD-WAN affected versions not specified Description The issue allows administrators to access the shell via the SD-WAN CLI using hard-coded credentials. Recommendations At the moment, there is no information about a newer version that contains ...