The vulnerability of the upgrade.sh component of the Kerio Control networking firewall software allows a hacker to increase their privileges.

The vulnerability of the upgrade.sh component of the Kerio Control networking software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to increase their privileges...

D-Link多款产品 操作系统命令注入漏洞

D-Link DI-8100G and others are products of China AUO D-Link.D-Link DI-8100G is a Gigabit Internet Behavior Management certified router.D-Link DI-8200G is an enterprise-class router.D-Link DI-8300G is a wireless broadband router designed for small and medium-sized network environments.The...

LPAR2RRD Remote Code Execution

This repository contains a proof of concept exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint...

PT-2025-23535 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The issue affects MyBB, free and open source forum software. It is caused by the upgrade component not validating user input properly, allowing attackers to perform local file inclusion LFI via a...

CVE-2024-7579

A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been declared as critical. Affected by this vulnerability is the function popen of the file /var/www/cgi-bin/upgrade.cgi of the component File Name Handler. The manipulation of the argument uploadedFile leads to os...

Arbitrary Code Execution

mautic/core is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient validation and access control during the execution of the upgrade script, allowing an attacker to execute arbitrary code during the upgrade process...

Missing Authentication For Critical Function

Mautic is vulnerable to Missing Authentication for Critical Function. The vulnerability is due to insufficient protection of the upgrade script, which could lead to exploitation if Mautic is installed in a specific, vulnerable configuration...

CVE-2022-25770 Insufficient authentication in upgrade flow

Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable...

Mautic 安全漏洞

Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic that stems from allowing the application to be updated via an upgrade script, where th...

PT-2024-11535 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic affected versions not specified Description: The upgrade logic in Mautic's application update via an upgrade script is not properly shielded, potentially leading to a vulnerable situation. However, this issue is mitigated by the fact...

CVE-2022-25770: Missing Authentication for Critical Function

Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable...

PT-2024-38432 · Alien Technology · Alien Technology Alr-F800

Name of the Vulnerable Software and Affected Versions: Alien Technology ALR-F800 versions up to 19.10.24.00 Description: A critical issue has been found, affecting the function popen of the file /var/www/cgi-bin/upgrade.cgi in the component File Name Handler. The manipulation of the argument...

CVE-2024-24520

An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place...

VulnCheck KEV: CVE-2020-11546

SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to execute arbitrary PHP code via Code Injection...

SUSE CVE-2013-6427

upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...

Upgrading to Ubuntu 14.04, RHEL 7 and CentOS 7 Guests

Customers who wish to upgrade existing Linux guests to versions which now operate in HVM mode that is, RHEL7, CentOS 7, and Ubuntu 14.04 should perform an in-guest upgrade. At this point, the upgraded Guest will only run in PV mode - which is not supported and has known issues. Customers should r...

RHEL 6 : Red Hat Storage 2.0 security, update #6 (Low) (RHSA-2013:1205)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1205 advisory. Red Hat Storage is a software only, scale-out storage solution that provides flexible and agile unstructured data storage for the enterprise. Multipl...

X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered By X7 Chat\r\n\r\n; if $argc3...

core: Insecure temporary file usage in nagios.upgrade_to_v3.sh

nagios.upgradetov3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/...

VulnCheck KEV: CVE-2013-6129

The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldatapassword, htmldataconfirmpassword, and htmldataemail parameters, as exploited in the wild in October 2013...