A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely.

Symantec Messaging Gateway is prone to an Authentication Bypass vulnerability that allows attackers to take advantage of an improper validation of user-supplied data in the RestoreAction.performRestore method.



An attacker can leverage this vulnerability to execute arbitrary code in the context of root.

HPE Intelligent Management Center is prone to a remote vulnerability that allows attackers to take advantage of an improper validation of user-supplied data, which can result in deserialization of untrusted data in WebDMDebugServlet.

An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM.

This module exploits a post authentication vulnerability in pfSense by abusing the system_groupmanager.php page which allows users to get Code Execution.

TrendMicro is prone to an abuse in the talker.php function to get authentication bypass, combined with the mod TMCSS user-supplied unvalidated input before using it to execute a system calls leads us to execute arbitrary code.

This module exploits an arbitrary file upload in DotCMS to install an agent.

This module exploits a command injection vulnerability in REDDOXX Appliance to install an agent.

This module exploits an arbitrary file upload in Trend Micro Mobile Security for Enterprise to install an agent.

This module exploits a zip file upload directory traversal in ATutor AContent to install an agent.

This module exploits a directory traversal arbitrary file upload in Schneider Electric U.Motion Builder to install an agent.