Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-10043 State: PUBLISHED Published: 2025-07-31T14:53:20.420Z Last Updated: 2025-07-31T15:18:46.893Z Vendors: Astium Products: VoIP PBX Problem Types: CWE-89, CWE-434 Description: A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator, the attacker can upload arbitrary PHP code through the importcompany field in import.php, resulting in remote code execution. The malicious payload is injected into /usr/local/astium/web/php/config.php and executed with root privileges by triggering a configuration
d is injected into /usr/local/astium/web/php/config.php and executed with root privileges by triggering a configuration reload via sudo /sbin/service astcfgd reload. Successful exploitation leads to full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/23831 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/astium_sqli_upload.rb - https://www.vulncheck.com/advisories/astium-voip-pbx-sqli-file-upload-rce
CVE ID: CVE-2013-10044 State: PUBLISHED Published: 2025-08-01T20:46:45.592Z Last Updated: 2025-08-06T14:45:03.937Z Vendors: OpenEMR Foundation Products: OpenEMR Problem Types: CWE-89, CWE-434 Description: An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Once elevated, the attacker can exploit an unrestricted file upload flaw to achieve remote code execution, resulting in full compromise of the application and its host system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb - https://www.exploit-db.com/exploits/28329 - https://www.exploit-db.com/exploits/28408 - https://www.open-emr.org/ - https://github.com/openemr/openemr - https://www.vulncheck.com/advisories/openemr-sqli-priv-esc-rce
CVE ID: CVE-2013-10046 State: PUBLISHED Published: 2025-08-01T20:37:55.129Z Last Updated: 2025-08-04T13:50:49.631Z Vendors: Agnitum Ltd. Products: Outpost Internet Security Problem Types: CWE-22, CWE-306 Description: A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting a directory traversal weakness in the pipe protocol, an attacker can instruct the service to load a malicious DLL from a user-controlled location. The DLL is then executed in the context
an instruct the service to load a malicious DLL from a user-controlled location. The DLL is then executed in the context of the privileged service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/local/agnitum_outpost_acs.rb - https://www.exploit-db.com/exploits/27282 - https://www.exploit-db.com/exploits/28335 - https://www.vulncheck.com/advisories/agnitum-outpost-internet-security-local-priv-esc
CVE ID: CVE-2013-10047 State: PUBLISHED Published: 2025-08-01T20:45:12.385Z Last Updated: 2025-11-20T23:24:52.660Z Vendors: MiniWeb Products: MiniWeb Problem Types: CWE-434 Description: An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystem. By abusing the upload handler and crafting a traversal path, an attacker can place a malicious .exe in system32, followed by a .mof file in the WMI directory. This triggers execution of the payload with SYSTEM privileges via the Windows Management Instrumentation service. The exploit is only viable on Windows versions prior to V
privileges via the Windows Management Instrumentation service. The exploit is only viable on Windows versions prior to Vista. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/miniweb_upload_wbem.rb - https://www.exploit-db.com/exploits/27607 - https://sourceforge.net/projects/miniweb/ - https://www.vulncheck.com/advisories/miniweb-arbitrary-file-upload
CVE ID: CVE-2013-10048 State: PUBLISHED Published: 2025-08-01T20:39:20.417Z Last Updated: 2025-11-20T23:26:40.886Z Vendors: D-Link Products: DIR-600, DIR-300 Problem Types: CWE-78 Description: An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker can execute arbitrary shell commands with root privileges, allowing full takeover of the device. This includes launching services such as Telnet, exfiltrating credentials, modifying system configuration, and d
device. This includes launching services such as Telnet, exfiltrating credentials, modifying system configuration, and disrupting availability. The flaw stems from the lack of authentication and inadequate sanitation of the cmd parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb - https://www.exploit-db.com/exploits/24453 - https://www.exploit-db.com/exploits/27528 - https://web.archive.org/web/20131022221648/http://www.s3cur1ty.de/m1adv2013-003 - https://www.vulncheck.com/advisories/d-link-legacy-unauth-rce
CVE ID: CVE-2013-10049 State: PUBLISHED Published: 2025-08-01T20:47:35.716Z Last Updated: 2025-08-06T14:49:43.328Z Vendors: Raidsonic Technology GmbH Products: IB-NAS5220, IB-NAS4220 Problem Types: CWE-78 Description: An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-supplied input in the timeZone parameter of a POST request, allowing remote attackers to inject arbitrary shell commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/ra
ry shell commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/raidsonic_nas_ib5220_exec_noauth.rb - https://www.exploit-db.com/exploits/24499 - https://www.exploit-db.com/exploits/28508 - https://web.archive.org/web/20160616174425/http://www.s3cur1ty.de/m1adv2013-010 - https://www.vulncheck.com/advisories/raidsonic-nas-devices-unauth-rce
CVE ID: CVE-2013-10050 State: PUBLISHED Published: 2025-08-01T20:39:00.384Z Last Updated: 2025-11-20T23:31:05.660Z Vendors: D-Link Products: DIR-300 rev A, DIR-615 rev D Problem Types: CWE-78 Description: An OS command injection vulnerability exists in multiple D-Link routers—confirmed on DIR-300 rev A (v1.05) and DIR-615 rev D (v4.13)—via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid credentials to inject arbitrary shell commands. Exploitation enables full device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is present in f
l device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is present in firmware versions that expose tools_vct.xgi and use the Mathopd/1.5p6 web server. No vendor patch is available, and affected models are end-of-life. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir300_exec_telnet.rb - https://www.exploit-db.com/exploits/25024 - https://www.exploit-db.com/exploits/27428 - https://web.archive.org/web/20140830203110/http://www.s3cur1ty.de/m1adv2013-014 - https://www.vulncheck.com/advisories/d-link-legacy-unauth-rce-2
CVE ID: CVE-2013-10051 State: PUBLISHED Published: 2025-08-01T20:41:38.540Z Last Updated: 2025-11-20T23:31:54.804Z Vendors: InstantCMS Products: InstantCMS Problem Types: CWE-95 Description: A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and executed without proper sanitation. A remote attacker can exploit this flaw by sending a crafted HTTP GET request with a base64-encoded payload in the Cmd header, resulting in arbitrary PHP code execution within the context of the web server. Additional An
payload in the Cmd header, resulting in arbitrary PHP code execution within the context of the web server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/instantcms_exec.rb - https://www.exploit-db.com/exploits/26622 - https://packetstorm.news/files/id/122176 - https://www.vulncheck.com/advisories/instantcms-remote-php-code-execution
CVE ID: CVE-2013-10052 State: PUBLISHED Published: 2025-08-04T18:03:58.414Z Last Updated: 2025-11-20T23:32:40.164Z Vendors: ZPanel Project Products: ZPanel Problem Types: CWE-269 Description: ZPanel includes a helper binary named zsudo, intended to allow restricted privilege escalation for administrative tasks. However, when misconfigured in /etc/sudoers, zsudo can be invoked by low-privileged users to execute arbitrary commands as root. This flaw enables local attackers with shell access to escalate privileges by writing a payload to a writable directory and executing it via zsudo. The vulnerability is particularly impactful in post-exploitation scenarios following web server compromise, wh
ia zsudo. The vulnerability is particularly impactful in post-exploitation scenarios following web server compromise, where the attacker inherits access to zsudo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/local/zpanel_zsudo.rb - https://www.exploit-db.com/exploits/26451 - https://github.com/zpanel/zpanelx - https://www.vulncheck.com/advisories/zpanel-zsudo-local-priv-esc
CVE ID: CVE-2013-10053 State: PUBLISHED Published: 2025-08-01T20:49:05.360Z Last Updated: 2025-11-20T23:33:26.446Z Vendors: ZPanel Project Products: ZPanel Problem Types: CWE-78 Description: A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system() call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an authenticated attacker can execute arbitrary system commands. Exploitation requires a valid ZPanel account—such as one in the default Users, Resellers, or Administrators groups—but no elevated privileges. Addit
d ZPanel account—such as one in the default Users, Resellers, or Administrators groups—but no elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/zpanel_username_exec.rb - https://web.archive.org/web/20130617014355/http://forums.zpanelcp.com/showthread.php?27898-Serious-Remote-Execution-Exploit-in-Zpanel-10-0-0-2 - https://github.com/zpanel/zpanelx - https://www.vulncheck.com/advisories/zpanel-htpasswd-module-username-command-execution
CVE ID: CVE-2013-10054 State: PUBLISHED Published: 2025-08-04T18:04:25.900Z Last Updated: 2025-08-05T15:49:22.523Z Vendors: LibrettoCMS Products: LibrettoCMS Problem Types: CWE-434 Description: An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php fails to properly validate file extensions, allowing attackers to upload files with misleading extensions and subsequently rename them to executable .php scripts. This enables remote code execution on the server w
g extensions and subsequently rename them to executable .php scripts. This enables remote code execution on the server without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/libretto_upload_exec.rb - https://www.exploit-db.com/exploits/26213 - https://www.exploit-db.com/exploits/26421 - https://sourceforge.net/projects/librettocms/ - https://www.vulncheck.com/advisories/librettocms-file-manager-arbitrary-file-upload
CVE ID: CVE-2013-10055 State: PUBLISHED Published: 2025-08-01T20:39:41.767Z Last Updated: 2025-11-20T23:34:14.198Z Vendors: Havalite CMS Products: Havalite CMS Problem Types: CWE-434 Description: An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers to upload malicious PHP files via a crafted multipart/form-data POST request. Once uploaded, the attacker can access the file directly under havalite/tmp/files/, resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichm
e directly under havalite/tmp/files/, resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/havalite_upload_exec.rb - https://www.exploit-db.com/exploits/26243 - https://sourceforge.net/projects/havalite/ - https://www.vulncheck.com/advisories/havalite-cms-arbitary-file-upload-rce
CVE ID: CVE-2013-10057 State: PUBLISHED Published: 2025-08-01T20:48:30.424Z Last Updated: 2025-08-06T15:01:27.471Z Vendors: Synactis Products: PDF In-The-Box Problem Types: CWE-121, CWE-94 Description: A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved TRegistry class pointer on the stack. This allows remote attackers to execute arbitrary code in the context of the user by enticing them to visit a malicious webpage that instantiates the vulnerable Ac
itrary code in the context of the user by enticing them to visit a malicious webpage that instantiates the vulnerable ActiveX control. The vulnerability was discovered via its use in third-party software such as Logic Print 2013. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/synactis_connecttosynactis_bof.rb - https://www.exploit-db.com/exploits/25835 - https://www.fortiguard.com/encyclopedia/ips/35840/synactis-pdf-in-the-box-connecttosynactic-buffer-overflow - https://www.synactis.com/pdf-in-the-box.htm - https://www.vulncheck.com/advisories/synactis-pdf-in-the-box-connec
flow - https://www.synactis.com/pdf-in-the-box.htm - https://www.vulncheck.com/advisories/synactis-pdf-in-the-box-connectosynactic-stack-based-buffer-overflow
CVE ID: CVE-2013-10058 State: PUBLISHED Published: 2025-08-01T20:44:51.202Z Last Updated: 2025-11-20T23:35:51.197Z Vendors: Linksys Products: WRT160nv2 Problem Types: CWE-78 Description: An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the apply.cgi endpoint. The web interface fails to properly sanitize user-supplied input passed to the ping_size parameter during diagnostic operations. An attacker with valid credentials can inject arbitrary shell commands, enabling remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7
ode execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/linksys_wrt160nv2_apply_exec.rb - https://www.exploit-db.com/exploits/24478 - https://www.exploit-db.com/exploits/25608 - https://web.archive.org/web/20140830181242/http://www.s3cur1ty.de/m1adv2013-012 - https://www.vulncheck.com/advisories/linksys-legacy-routers-remote-command-injection
CVE ID: CVE-2013-10059 State: PUBLISHED Published: 2025-08-01T20:38:13.525Z Last Updated: 2025-11-21T00:09:21.464Z Vendors: D-Link Products: DIR-615H1 Problem Types: CWE-78 Description: An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmware version 8.04) via the tools_vct.htm endpoint. The web interface fails to sanitize input passed from the ping_ipaddr parameter to the tools_vct.htm diagnostic interface, allowing attackers to inject arbitrary shell commands using backtick encapsulation. With default credentials, an attacker can exploit this blind injection vector to execute arbitrary commands. Additional Analyst Notes: - C
ntials, an attacker can exploit this blind injection vector to execute arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir615_up_exec.rb - https://www.exploit-db.com/exploits/24477 - https://www.exploit-db.com/exploits/25609 - https://web.archive.org/web/20150921102603/http://www.s3cur1ty.de/m1adv2013-008 - https://www.vulncheck.com/advisories/d-link-legacy-os-command-injection
CVE ID: CVE-2013-10060 State: PUBLISHED Published: 2025-08-01T20:45:59.280Z Last Updated: 2025-11-21T00:11:08.597Z Vendors: Netgear Products: DGN2200B Problem Types: CWE-78 Description: An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted input to the pppoe_username parameter. This flaw allows full compromise of the device and may persist across reboots unless configuration is restored. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7
n is restored. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/netgear_dgn2200b_pppoe_exec.rb - https://www.exploit-db.com/exploits/24513 - https://www.exploit-db.com/exploits/24974 - https://web.archive.org/web/20170422033239/http://www.s3cur1ty.de/m1adv2013-015 - https://www.vulncheck.com/advisories/netgear-legacy-routers-rce
CVE ID: CVE-2013-10061 State: PUBLISHED Published: 2025-08-01T20:45:34.559Z Last Updated: 2025-11-21T00:16:28.258Z Vendors: Netgear Products: DGN1000B Problem Types: CWE-78 Description: An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter in the setup.cgi endpoint. The vulnerability arises from improper input neutralization, enabling command injection through crafted POST requests. This flaw enables remote attackers to deploy payloads or manipulate system state post-authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubuse
system state post-authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/netgear_dgn1000b_setup_exec.rb - https://www.exploit-db.com/exploits/24464 - https://www.exploit-db.com/exploits/24931 - https://web.archive.org/web/20150218074318/http://www.s3cur1ty.de/m1adv2013-005 - https://www.vulncheck.com/advisories/netgear-legacy-routers-rce-2
CVE ID: CVE-2013-10062 State: PUBLISHED Published: 2025-08-01T20:44:28.559Z Last Updated: 2025-11-21T00:17:09.226Z Vendors: Linksys Products: E1500 Problem Types: CWE-22 Description: A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/
configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/linksys_e1500_traversal.rb - https://www.exploit-db.com/exploits/24475 - https://web.archive.org/web/20150428184015/http://www.s3cur1ty.de/m1adv2013-004 - https://www.vulncheck.com/advisories/linksys-legacy-routers-path-traversal
CVE ID: CVE-2013-10063 State: PUBLISHED Published: 2025-08-01T20:46:21.225Z Last Updated: 2025-11-21T00:19:04.889Z Vendors: Netgear Products: SPH200D Problem Types: CWE-22 Description: A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal sequences. This can expose sensitive system files and configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/netgear_sph200d_tr
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/netgear_sph200d_traversal.rb - https://www.exploit-db.com/exploits/24441 - https://web.archive.org/web/20130207034706/http://www.s3cur1ty.de/m1adv2013-002 - https://www.vulncheck.com/advisories/netgear-sph200d-path-traversal-via-http-get
CVE ID: CVE-2013-10064 State: PUBLISHED Published: 2025-08-05T19:58:41.458Z Last Updated: 2025-11-21T00:19:58.710Z Vendors: ActFax Communication Products: ActFax Server Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied data in @F506 fax header fields due to insecure usage of strcpy. Remote attackers can exploit this vulnerability by sending specially crafted @F506 fields, potentially leading to arbitrary code execution. Successful exploitation requires network access to TCP port 4559 and does not require authentication. Additional Analyst Notes: - CISA
loitation requires network access to TCP port 4559 and does not require authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.actfax.com/ - https://web.archive.org/web/20130212065755/http://www.pwnag3.com/2013/02/actfax-raw-server-exploit.html - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/actfax_raw_server_bof.rb - https://www.exploit-db.com/exploits/24467 - https://www.vulncheck.com/advisories/actfax-raw-server-buffer-overflow