4046 matches found
D-Link DSL-GS225 J1 OS Command Injection Vulnerability
The D-Link DSL-GS225 J1 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-GS225 J1 AU1.0.4 version. The vulnerability can be exploited to execute operating system commands by placing shell metacharacters after supported CLI commands...
CVE-2020-6765
D-Link DSL-GS225 J1 AU1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET...
CVE-2020-11581
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
Command injection
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
CVE-2020-11490
Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the index.cgi certissuer, certdivision, certorganization, certlocality, certstate, certcountry, or certemail parameter...
Design/Logic Flaw
Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the index.cgi certissuer, certdivision, certorganization, certlocality, certstate, certcountry, or certemail parameter...
CVE-2020-11490
Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the index.cgi certissuer, certdivision, certorganization, certlocality, certstate, certcountry, or certemail parameter...
openITCOCKPIT Command Execution Vulnerability
It-novum OpenITCOCKPIT is a set of open source system monitoring tools from Germany's It-novum. A security vulnerability exists in the Web-based terminal in It-novum openITCOCKPIT versions prior to 3.7.3. An attacker can exploit this vulnerability to execute arbitrary operating system commands wi...
CVE-2020-10789
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
CVE-2020-10789
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
Design/Logic Flaw
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
NETGEAR Prosafe WC9500, WC7600 and WC7520 Operating System Command Injection Vulnerability
NETGEAR Prosafe WC9500 and others are a wireless controller for managing AP access points from NETGEAR. A security vulnerability exists in the NETGEAR Prosafe WC9500 version 5.1.0.17, WC7600 version 5.1.0.17, and WC7520 version 2.5.0.35. A remote attacker can exploit the vulnerability to execute...
CVE-2016-11022
NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to loginhandler.php...
Code injection
NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to loginhandler.php...
CVE-2016-11022
NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to loginhandler.php...
CVE-2016-11022
CVE-2016-11022 affects NETGEAR Prosafe WC9500 (v5.1.0.17), WC7600 (v5.1.0.17), and WC7520 (v2.5.0.35). A remote attacker can achieve code execution with root privileges by supplying shell metacharacters in the reqMethod parameter to login_handler.php. The entry explicitly describes remote code ex...
Artica Proxy Operating System Command Injection Vulnerability
Artica Proxy is an open source Artica proxy solution. An operating system command injection vulnerability exists in Artica Proxy version 4.26, which can be exploited by remote attackers to execute commands with the help of shell metacharacters in the 'Modify the hostname' field...
CVE-2020-10818
Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field...