All CVEs — page 430 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vulnerability allows for os command injection through the manipulation of the Password argument in the panelTask.bt_task._unzip function, enabling remote code execution.
The flaw allows command injection through the manipulation of the split_file_path argument in the merge_split_file function of aaPanel BaoTa up to 11.8.0, enabling remote code execution.
The vulnerability allows for os command injection through the manipulation of the Password argument in the InputSql function of aaPanel BaoTa up to 11.8.0, leading to potential remote code execution.
The flaw allows for os command injection via the url argument in the network_tools function, enabling remote attackers to execute arbitrary commands.
The vulnerability allows for os command injection via manipulation of the QUERY_STRING argument in the /www/cgi-bin/network_tools file, enabling remote code execution.
The vulnerability allows remote attackers to bypass authorization by manipulating the argument section of the uci.apply function in the Netcore NBR100V2 1.3.240614.030928 device, leading to unauthorized access.
A stack-based buffer overflow exists in Eyeplus 57.0.0.0308's HTTP parser component, allowing remote attackers to potentially execute arbitrary code through malformed input. This vulnerability is particularly concerning because it affects a core network service component and has a public exploit available.