CVE-2018-9285

MainAnalysisContent.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.38410007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before...

ClipBucket OS Command Injection Vulnerability

ClipBucket is an open source video sharing software developed by Arslan team. The software allows you to share videos to video sites and supports the lights off effect when watching a movie. A security vulnerability exists in versions prior to ClipBucket 4.0.0 Release 4902. The vulnerability can ...

MISP app/Controller/ServersController.php file OS command injection vulnerability

MISP is a suite of open source software solutions for collecting, storing, distributing and sharing cybersecurity metrics and threats cybersecurity event analysis and malware analysis. A security vulnerability exists in the app/Controller/ServersController.php file in MISP version 2.4.87. An...

MP Form Mail CGI eCommerce Edition vulnerable to OS command injection

Overview MP Form Mail CGI eCommerce Edition provided by futomi Co., Ltd. is a CGI used to send mail from a web form. MP Form Mail CGI eCommerce Edition contains an OS command injection vulnerability CWE-78. Daiki Ichinose of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA...

CVE-2017-6224

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...

UBUNTU-CVE-2017-7413

In HordeCrypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email...

PC-EGG pWebManager OS Command Injection Vulnerability

PC-EGG pWebManager is a set of static HTML homepage template tool based on PHP language . A security vulnerability exists in PC-EGG pWebManager versions prior to 3.3.10 and pWebManager for PHP4 versions prior to 2.2.2. A remote attacker can exploit this vulnerability to execute arbitrary OS...

Operating System Command Injection Vulnerability in Multiple TYPE-MOON Products

TYPE-MOON Fate/stay night, Fate/hollow ataraxia, Witch on the Holy Night, and Fate/stay night + are all game products of the Japanese company TYPE-MOON. A security vulnerability exists in several TYPE-MOON products. A remote attacker could exploit the vulnerability to execute arbitrary OS command...

Symantec Web Gateway OS Command Injection Vulnerability (CNVD-2015-06070)

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. An OS command injection vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability by submitting a specially...

MQAC.sys Arbitrary Write Privilege Escalation

A vulnerability within the MQAC.sys module allows an attacker to overwrite an arbitrary location in kernel memory. This module will elevate itself to SYSTEM, then inject the payload into another SYSTEM process. Module Options msf use exploit/windows/local/mqac/write msf undefinedwrite show action...

Qi Bo CMS know that the system injection vulnerability-vulnerability warning-the black bar safety net

php168 know the system injection vulnerability Ps:inadvertently come I'm finishing up the three keywords inurl:zhidao Powered by qibosoft inurl:w8 Powered by qibosoft inurl:ask Powered by qibosoft...

Hearing the odd tourist site system injection vulnerability-vulnerability warning-the black bar safety net

The entire system is the injection of! Such as: JingdianShow. asp NewsShow. asp These files contain UU. Lable. All. asp Code: Function UULableJingdianSstrList Set rs = Server. CreateObject"adodb. recordset" sql = "select from UUJingdian where Jingdianid=" Jingdianid&" " rs. Open sql, Conn, 1, 1 I...

EspCms site system injection vulnerability and fix-vulnerability warning-the black bar safety net

The injection pointburst table prefix: index. php? ac=search&at=taglist&tagkey=%2 5 2 7,tags orselect 1 fromselect count,concatselect select concat0x7e,0x27,tablename,0x27,0x7e from informationschema. the tables where tableschema=database limit 0,1,floorrand02x from informationschema. tables grou...

EspCms site system injection vulnerability-vulnerability warning-the black bar safety net

Baidu keywords: inurl:index. php? ac=article&at=read&did= The injection pointburst table prefix: index. php? ac=search&at=taglist&tagkey=%2 5 2 7,tags orselect 1 fromselect count,concatselect select concat0x7e,0x27,tablename,0x27,0x7e from informationschema. the tables where tableschema=database...

SmarterMail 7.1.3876 - Directory Traversal

Note: Fixed by the vendor in version 7.2.3925 http://www.smartertools.com/smartermail/releasenotes/v7.aspx Vendor: smartertools.com SmarterMail 7.x 7.1.3876 | Bug : Directory Traversal, OS Command Injection, Other Critcal Vulns Vendor: smartertools.com SmarterMail 7.x 7.1.3876 Date: 2010-09-12...