Roxy-WI - Remote Code Execution Detection

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the sshcommand function without processing the inputs received from the user in the /app/funct.py file. !/usr/bin/env python3 -- coding: utf-8 -- """Roxy-WI before 6.""" import re from...

CVE-2022-24630: Improper Neutralization of Special Elements used in a Command

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an sshcommand field that is executed...