10430 matches found
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7629
CVE-2020-7629 affects install-package up to version 0.4.0 and is a Command Injection vulnerability that allows execution of arbitrary commands via the options argument. The issue is documented across multiple sources (NVD/Red Hat/OSV/GHSA/Snyk) with severity ranging from High to Critical (CVSS v3...
Command Injection
Overview install-package is a package that installs node modules from JavaScript. Affected versions of this package are vulnerable to Command Injection. The argument options can be controlled by users without any sanitization. PoC var root = require"install-package"; root"", "& touch Song"; Detai...
Unspecified Vulnerability in Deskpro (CNVD-2020-22253)
Deskpro is a helpdesk software solution that helps companies manage communication with their customers and user base across multiple channels. A security vulnerability exists in Deskpro. An attacker could exploit the vulnerability to be able to control/install helpdesk applications and disclose t...
compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)
install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: SNYK:JS-INSTALLPACKAGE-564267...
Libosinfo: osinfo-install-script option leaks password via command line argument
A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin passwords via command line arguments. This could allow guest passwords to leak to other system users via a process listing...
Webkiller v2.0 - Tool Information Gathering
Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝████&9608 ;╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗...
CVE-2020-3761
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...
The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to install programs, view, modify, delete data, or create new accounts with full user privileges.
The vulnerability of the Windows Media Foundation component in Windows operating systems arises from incorrect handling of objects in memory. Exploiting this vulnerability allows attackers to install programs, view, modify, delete data, or create new user accounts with full privileges using a...
Option to Install Veeam ONE Agent is Unavailable (Greyed Out)
Challenge When attempting to install the Veeam ONE Agent on a Veeam Backup Server, theInstall agent option is unavailable and greyed out. Cause There are several possible causes for this issue: The Veeam ONE Agent is already installed on the Veeam Backup & Replication Server. The Veeam ONE Server...
CVE-2019-19335
CVE-2019-19335 affects OpenShift 4.2 installer (ose-installer). During cluster installation, openshift-install creates an auth directory containing kubeconfig and kubeadmin-password, which are incorrectly world-readable, exposing API credentials. Multiple sources (NVD, OSV, Red Hat advisories) co...
This Stalkerware Delivers Extra-Creepy Features
Researchers are sending up a red flag over the distribution of an aggressive stalkerware app called Monitor Minor. In a report released Monday, researchers said the Android version of the app gives stalkers near absolute control of targeted devices, going so far as allowing them to capture the...
Umbraco Code Issue Vulnerability
Umbraco is a Danish company Umbraco C written in open source content management system CMS. A security vulnerability exists in Umbraco CMS version 8.5.3. The vulnerability can be exploited by an attacker to upload files and execute code via the Install Package feature...
Umbraco Cloud Code Issue Vulnerability
Umbraco is a Danish company Umbraco a set of C written in open source content management system CMS.Umbraco Cloud is the cloud version of Umbraco. A security vulnerability exists in Umbraco Cloud version 8.5.3. The vulnerability can be exploited by an attacker to upload files and execute code wit...
CVE-2020-9472
Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...
CVE-2020-9472
Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...
Design/Logic Flaw
Umbraco Cloud 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Packages functionality...
CVE-2020-9472
Umbraco CMS 8.5.3 allows an authenticated file upload and consequently Remote Code Execution via the Install Package functionality...
