CVE-2019-12679: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

CVE-2019-6810: Improper Access Control

CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol...

WordPress Give SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Give is one of the fundraising platform plugins used in it. A SQL injection vulnerability exists in WordPress Give. The vulnerability...

CVE-2019-10915

A vulnerability has been identified in TIA Administrator All versions V1.0 SP1 Upd1. The integrated configuration web application TIA Administrator allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access t...

CVE-2019-5497

NetApp AFF A700s Baseboard Management Controller BMC firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution...

CVE-2019-11646

Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61. This vulnerability could allow Remote unauthorized command execution and unauthorized disclosure ...

CVE-2019-11646

CVE-2019-11646 affects Micro Focus Service Manager, impacting multiple versions including 9.30 through 9.61. The description across sources states a vulnerability enabling remote unauthorized command execution and unauthorized disclosure of information. The connected documents consistently descri...

Default Privileged Account Vulnerability in the NetApp Service Processor - Lenovo Support US

No description provided...

openSUSE Security Update : bash (openSUSE-2019-1178)

This update for bash fixes the following issues: Security issue fixed : - CVE-2019-9924: Fixed a vulnerability in which shell did not prevent user BASHCMDS allowing the user to execute any command with the permissions of the shell bsc1130324. This update was imported from the SUSE:SLE-12-SP2:Upda...

Grandstream GWN7000 Command Injection Vulnerability

The Grandstream GWN7000 is an enterprise-class VPN router from Grandstream. A security vulnerability exists in the Grandstream GWN7000 versions prior to 1.0.6.32. An attacker can exploit this vulnerability to execute illegal commands...

CVE-2019-9924

rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASHCMDS, thus allowing the user to execute any command with the permissions of the shell...

Astra Linux astra-safepolicy Unauthorized Command Execution

The vulnerability of the astra-safepolicy utility in the Astra Linux operating system is related to a flaw that causes no cleanup of the environment during the execution of interpreters, and it also allows for bypassing restrictions on the execution of these interpreters by unauthorized users...

CVE-2018-19023: Authentication Bypass by Capture-replay

Hetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

Authentication flaw

Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...

CVE-2018-17933

VGo Robot Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client...

CVE-2018-17935: Authentication Bypass by Capture-replay

All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state...

Security Bulletin: Security vulnerabilities have been identified in DB2 which is shipped with IBM Performance Management products

Summary DB2 is shipped with IBM Performance Management products. Some of the information about security vulnerabilities affecting DB2 has been published in security bulletins. Vulnerability Details CVEID: CVE-2017-1520 DESCRIPTION: IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorize...

Security Bulletin: Multiple Vulnerabilities fixed in IBM Security Directory Server

Summary Multiple Security Vulnerabilities fixed in the IBM Tivoli/Security Directory Server product. Vulnerability Details CVEID: CVE-2015-1978 DESCRIPTION: IBM Security Directory Server is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker...

Siemens SIMATIC S7-1200 CPU - Cross-Site Request Forgery Vulnerability

Exploit for linux platform in category web applications Exploit Title: Siemens SIMATIC S7-1200 CPU - Cross-Site Request Forgery Google Dork: inurl:/Portal/Portal.mwsl Exploit Author: t4rkd3vilz, Jameel Nabbo Vendor Homepage: https://www.siemens.com/ Version: SIMATIC S7-1200 CPU family: All versio...

Debian: Security Advisory (DLA-1122-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...