CVE-2020-35714

Affected product: Belkin LINKSYS RE6500 (firmware before 1.0.11.001). Vulnerability: Remote authenticated users can execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program. This indicates an arbitrary command execution path enabled by combinat...

CVE-2020-28185

CVE-2020-28185 affects TerraMaster TOS (older than or equal to 4.2.06). The vulnerability allows remote, unauthenticated attackers to enumerate valid usernames through the username parameter on wizard/initialise.php. This user enumeration could facilitate targeted credential or further intra-syst...

CVE-2020-28188

TerraMaster TOS is affected up to version 4.2.06 with unauthenticated remote code execution via /include/makecvs.php in the Event parameter. The underlying issue is a command-injection flaw that lets an attacker run arbitrary OS commands on the system, typically with the web app user privileges. ...

CVE-2020-35665

Summary: CVE-2020-35665 affects TerraMaster TOS 4.2.06 and earlier. An unauthenticated remote code execution is possible via shell metacharacters in the Event parameter processed during CSV creation in include/makecvs.php. The vulnerability allows an attacker to execute commands on the system wit...

CVE-2020-24581

CVE-2020-24581 affects D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The issue stems from an execute_cmd.cgi feature (not reachable via the web UI) that allows an authenticated user to execute Operating System commands, enabling potential arbitrary command execution on the ...

CVE-2020-29583

CVE-2020-29583 (Zyxel hard-coded credentials) The Zyxel vulnerability concerns an undocumented user account, “zyfwp,” with an unchangeable password found in the firmware of multiple Zyxel devices. The account can grant admin access via SSH or the web interface. Affected devices include Zyxel USG/...

CVE-2020-20300

WeiPHP 5.0 is affected by a SQL injection vulnerability in the wp_where function. The Nuclei template details exploitability, stating that an attacker could potentially obtain sensitive data, modify data, and perform unauthorized administrative operations within the affected site context. CVE-202...

CVE-2020-25494

CVE-2020-25494 affects Xinuos OpenServer v5/v6. The vulnerability is in the CGI component cgi-bin/printbook (parameters outputform and toclevels), enabling shell metacharacter input and arbitrary command execution. Exploitation details in public sources confirm OS command injection with remote, u...

CVE-2020-35476

OpenTSDB 2.4.0 and earlier is vulnerable to remote code execution via the yrange parameter, which writes a gnuplot file to /tmp and invokes it through mygnuplot.sh. The underlying issue is command injection not fully mitigated by tsd/GraphHandler.java, enabling an attacker to execute arbitrary co...

CVE-2020-10770

CVE-2020-10770 describes a Server-Side Request Forgery (SSRF) in OpenID Connect Issuer handling of the request_uri parameter in Keycloak before 13.0.0, allowing an attacker to cause the server to fetch an unverified URL. The vulnerability is backed by multiple sources within the connected documen...

CVE-2020-35234

The CVE refers to the WordPress plugin Easy WP SMTP (versions before 1.4.4). A directory-listing issue in wp-content/plugins/easy-wp-smtp/ exposes a log file (e.g., _______debug_log.txt) that contains password-reset links. An attacker can trigger a password reset for the Administrator account and...

CVE-2020-35235

CVE-2020-35235 affects the WordPress Secure-File-Manager plugin (through version 2.5). The root cause is loading elFinder code via vendor/elfinder/php/connector.minimal.php without proper access control, enabling any authenticated user to issue the elFinder upload command and achieve remote code ...

CVE-2020-29574

CVE-2020-29574 is a SQL injection in Cyberoam OS WebAdmin up to version 2020-12-04, allowing unauthenticated remote execution of arbitrary SQL statements. Affected: Cyberoam OS WebAdmin; root cause: input handling in WebAdmin. Impacts: high/total in CVSS terms (high for confidentiality, integrity...

CVE-2020-17530

CVE-2020-17530 describes a vulnerability in Apache Struts 2 where forced OGNL evaluation on raw user input in tag attributes can cause remote code execution. Affected products range from Struts 2.0.0 up to 2.5.25. The description states that evaluating untrusted input via the %{...} syntax enable...

CVE-2020-17144

CVE-2020-17144 is a deserialization vulnerability in Microsoft Exchange Server 2010 (MRM.AutoTag.Model) that can enable remote code execution. Public details from Attackerkb indicate exploitation requires authentication (e.g., via OWA EWS) and can execute OS commands with SYSTEM-level privileges;...

CVE-2020-17132

CVE-2020-17132 is an Exchange Server remote code execution vulnerability tied to Microsoft Exchange Remote Code Execution. Connected sources indicate Microsoft Exchange Server is affected and describe an RCE vulnerability in Exchange Server, with remediation provided by the December 2020 security...

CVE-2020-17103

CVE-2020-17103 concerns the Windows Cloud Files Mini Filter Driver (cldflt.sys). Public materials describe a local privilege escalation via a race condition in the mini-filter that can hijack the windir environment path and redirect operations, enabling SYSTEM-level access under certain condition...

CVE-2020-26836

SAP Solution Manager (Trace Analysis) 7.2 (ST 720) contains an Open Redirect vulnerability caused by misuse of a URL parameter. An attacker could craft a link that, when clicked by a user, redirects to a malicious site, potentially enabling credential theft or malware delivery. Affected component...

CVE-2020-27930

CVE-2020-27930 is a memory corruption vulnerability in font parsing that can lead to arbitrary code execution when processing a malicious font. Affected Apple software includes macOS Big Sur 11.0.1, iOS 14.2, iPadOS 14.2, watchOS 7.1, and corresponding Security Updates (e.g., High Sierra/Mojave)....

CVE-2020-27950

CVE-2020-27950 is a memory initialization issue in Apple’s XNU kernel that could allow a malicious app to disclose kernel memory. The CVE is fixed in multiple Apple updates: macOS Big Sur 11.0.1, iOS 14.2/iPadOS 14.2, watchOS 7.1, watchOS 6.2.9, and Security Updates for macOS Catalina 10.15.7 (Su...