Lucene search
+L

44 matches found

NVD
NVD
added 2026/08/24 4:16 a.m.18 views

CVE-2026-78211

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.01545EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 3:32 a.m.11 views

EUVD-2026-64706

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS5.8AI score0.01545EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 3:32 a.m.55 views

CVE-2026-78211 4MOSAn Security Technology|4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.01545EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 3:32 a.m.33 views

CVE-2026-78211

4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...

9.8CVSS5.7AI score0.01545EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.13 views

PT-2026-79818

Name of the Vulnerable Software and Affected Versions 4MOSAn GCB Doctor affected versions not specified Description An OS Command Injection issue exists where unauthenticated remote attackers can execute arbitrary system commands on the server. This is possible through a parameter in an unremoved...

9.8CVSS5.8AI score0.01545EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/10 9:31 a.m.10 views

EUVD-2026-21344

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

5.1CVSS5.9AI score0.00196EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/10 9:16 a.m.8 views

CVE-2026-33456

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

7.6CVSS0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/10 8:31 a.m.37 views

CVE-2026-33456 Potential livestatus injection in notification test

Livestatus injection in the notification test mode in Checkmk 2.5.0b4 and 2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description...

5.1CVSS0.00196EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/11 7:16 p.m.8 views

CVE-2019-25468

NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the scripttest.jsp endpoint. Attackers can send POST requests with shell commands embedded in the 'content'...

9.8CVSS0.00756EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-9444

Malware in sbrugna...

4.8CVSS5.2AI score0.00534EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/08/12 12:21 a.m.112 views

Wavlink-WN530G3A-Cmd-Injection

Wavlink-WN530G3A-Cmd-Injection This repo details the proof of...

8.1AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2024/12/11 10:28 p.m.12 views

Test page title

Test page heading...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/08/26 12:00 a.m.6 views

PT-2024-30161 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the "/music/controller.php?page=test" endpoint, allowing remote attackers to execute arbitrary code via the page parameter. Thi...

6.3CVSS6.8AI score0.00639EPSS
SaveExploits1References7
NVD
NVD
added 2024/05/03 5:15 p.m.28 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS7.4AI score0.00313EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/03 5:15 p.m.8 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS6AI score0.00313EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/05/03 12:00 a.m.15 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.7AI score0.00313EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/05/03 12:00 a.m.42 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.6AI score0.00313EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/05/03 12:00 a.m.11 views

PT-2024-25484 · Netis Systems · Netis-Systems Mex605

Name of the Vulnerable Software and Affected Versions: netis-systems MEX605 version 2.00.06 Description: The issue allows attackers to execute arbitrary OS commands via a crafted payload to the "ping test page". Recommendations: For netis-systems MEX605 version 2.00.06, consider restricting acces...

5.3CVSS7.8AI score0.00313EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:15 a.m.4 views

SUSE CVE-2006-2195

Cross-site scripting XSS vulnerability in horde 3 horde3 before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via 1 templates/problem/problem.inc and 2 test.php...

6.8CVSS6AI score0.02238EPSS
SaveExploits1References6
OSV
OSV
added 2022/11/29 5:15 p.m.8 views

CVE-2022-44355

SolarView Compact 7.0 is vulnerable to Cross-site Scripting XSS via /networktest.php...

6.1CVSS5.8AI score0.01644EPSS
SaveExploits1References1
Rows per page
Query Builder