2623 matches found
CVE-2020-18766
A cross-site scripting XSS vulnerability AntSword v2.0.7 can remotely execute system commands...
Online Library Management System 1.0 - Arbitrary File Upload
Exploit Title: Online Library Management System 1.0 - Arbitrary File Upload Date: 22-10-2020 Exploit Author: Jyotsna Adhana Vendor Homepage: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html Software Link:...
CVE-2020-24425
Dreamweaver version 20.2 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges...
CVE-2020-5791
Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system commands with the privileges of the apache user...
CVE-2020-13778
rConfig 3.9.4 and earlier allows authenticated code execution of system commands by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php...
Command Execution Vulnerability in Tianqing Security Isolation and Information Exchange System (CNVD-2020-60067)
Tianqing Security Isolation and Information Exchange System is an access control switch equipment with network isolation technology independently developed by Beijing Qixingchen Information Technology Co., Ltd, which provides high security isolation protection for key data. A command execution...
CVE-2020-6364
SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...
The vulnerability of the device controller in the Cisco Data Center Network Manager system allows a hacker to execute arbitrary operating system commands.
The vulnerability of the DCNM device’s dispatcher exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands remotely...
Crafter CMS Dynamic Management Code Resource Miscontrol Vulnerability (CNVD-2020-63996)
Crafter CMS is an open source content management system for websites, mobile apps, VR and more. A Dynamic Management Code Resource Miscontrol vulnerability exists in Crafter Studio in Crafter CMS. An attacker can exploit this vulnerability to execute OS commands via Groovy scripts...
The vulnerability of the RESTFull API mechanism of the Kylin data processing platform allows a perpetrator to execute arbitrary commands.
The vulnerability of the RESTFull API mechanism of the Kylin data processing platform is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
ng-packagr Command Injection Vulnerability
ng-packagr is an extension library for Js for individual developers . The library can be configured via a configuration file to package the developer's library into the APF format . A command injection vulnerability exists in ng-packagr versions prior to 10.1.1, which stems from command injection...
PT-2020-6848 · Sophos · Sophos Sg Utm
Name of the Vulnerable Software and Affected Versions: Sophos SG UTM versions prior to v9.705 MR5 Sophos SG UTM versions prior to v9.607 MR7 Sophos SG UTM versions prior to v9.511 MR11 Description: A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM. The vulnerability is...
Command Execution Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Yixin Technology Co.
But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...
Command Execution Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Dixin Technology (CNVD-2020-60314)
But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...
CVE-2020-24552
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege...
Command injection
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege...
CVE-2020-24552 Atop Technology 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway - Command Injection
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code and execute system commands without privilege...
SQLMap v1.4.9 - Automatic SQL Injection And Database Takeover Tool
SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...