438 matches found
CVE-2024-41585
DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an attacker to leverage the recvCmd binary to escape from the emulated instance and inject arbitrary commands into the host machine...
CVE-2024-7591
Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...
Zyxel NWA1100-N 操作系统命令注入漏洞
The Zyxel NWA1100-N is a wireless access point from China Heqin Zyxel. An operating system command injection vulnerability exists in the Zyxel NWA1100-N version 1.00AACE.1C0, which stems from the presence of a command injection vulnerability that could allow an unauthenticated attacker to execute...
TOTOLINK AC1200 安全漏洞
The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from an operating system command injection vulnerability that stems from the setDiagnosisCfg method failing to properly filter constructed command special characters,...
CVE-2024-42744
In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUser. Authenticated Attackers can send malicious packet to execute arbitrary commands...
CVE-2024-6917
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection.This issue affects Veribase Order Management: before v4.010.2...
FFRI AMC vulnerable to OS command injection
Overview FFRI AMC provided by FFRI Security, Inc. is a management console for the endpoint security product FFRI yarai and ActSecure X. FFRI AMC contains an OS command injection vulnerability CWE-78. It is exploitable when the notification program setting is enabled, the executable file path is...
Smart PLC AC14xx and Smart PLC AC4xxS Operating System Command Injection Vulnerability
The ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS are a series of hosts/gateways from ifm electronic Germany. An operating system command injection vulnerability exists in Smart PLC AC14xx and Smart PLC AC4xxS versions 4.3.17 and earlier, which originates from a remote...
ELECOM WRC-X5400GS-B和WRC-X5400GSA-B 安全漏洞
The ELECOM WRC-X5400GS-B is a Wi-Fi Gigabit router from ELECOM Japan. A security vulnerability exists in the ELECOM WRC-X5400GS-B v1.0.10 and earlier and WRC-X5400GSA-B v1.0.10 and earlier, which stems from a contained operating system command injection vulnerability...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. Ruijie Networks RG-UAC suffers from an operating system command injection vulnerability, which originates from an unknown...
PT-2024-4482 · Smartec +1 · Smartec St-Fr041Me +2
Name of the Vulnerable Software and Affected Versions: ZkTeco-based OEM devices version ZAM170-NF-1.8.25-7354-Ver1.0.0 Description: The issue is related to an OS Command Injection vulnerability, which allows for the execution of arbitrary commands. This vulnerability affects ZkTeco-based OEM...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240506 and earlier versions, which...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC version 20240428 and earlier versions,...
PT-2024-25684
Name of the Vulnerable Software and Affected Versions sagemaker-python-sdk versions prior to 2.214.3 Description The capture dependencies function in the sagemaker.serve.save retrive.version 1 0 0.save.utils module allows for potentially unsafe Operating System OS Command Injection if an...
MailCleaner 操作系统命令注入漏洞
MailCleaner is an anti-virus email gateway from MailCleaner, Inc. An operating system command injection vulnerability exists in MailCleaner version 2023.03.14, which stems from the presence of an operating system command injection vulnerability...
Rapid7 MailCleaner 操作系统命令注入漏洞
Rapid7 MailCleaner is a set of penetration testing frameworks from the US company Rapid7. The framework supports vulnerability verification and security assessment, among others. MailCleaner version 2023.03.14 suffers from an operating system command injection vulnerability that stems from the...
Rapid7 MailCleaner 安全漏洞
Rapid7 MailCleaner is a set of penetration testing frameworks from the US company Rapid7. The framework supports vulnerability validation and security assessment, among others. A security vulnerability exists in MailCleaner version 2023.03.14, which stems from the presence of an operating system...
CVE-2024-26023
OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands...
TBK DVR-4104、DVR-4216 操作系统命令注入漏洞
TBK DVR-4104 is a digital video recorder from TBK. An OS command injection vulnerability exists in TBK DVR-4104, DVR-4216 version 20240412 and earlier versions, which stems from the fact that incorrect operation of the parameter mdb/mdc can lead to OS command injection...