Command injection

The hookprocess function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."...

CVE-2012-5534

WeeChat vulnerability CVE-2012-5534 affects the hook_process() in the plugin API for versions 0.3.0–0.3.9.1, allowing remote command execution via shell metacharacters in a plugin-derived command (shell expansion). Impact described across several advisories: remote code execution or other effects...

CVE-2012-5534

The hookprocess function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."...

CVE-2011-2996

Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2011-2996

CVE-2011-2996 concerns an unspecified vulnerability in the Firefox plugin API present in Firefox 3.6.x up to (but before) 3.6.23. The issue could enable a remote attacker to cause memory corruption and an application crash, with the potential for arbitrary code execution via unknown vectors. Publ...

CVE-2011-2996

Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 expose a vulnerability where remote attackers can bypass a security ID and call restricted plugin API functions by crafting a page that includes max.src. The NVD entry CVE-2005-1091 documents this as a cross-page script inclusion issue allowing limited privileges to be use...