PT-2021-29760

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description The issue is related to a lockup on kernel exec fault. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.51, update ...

Cross-Site Scripting (XSS)

Apache drill-java-exec is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the queryId...

PT-2021-27665

Name of the Vulnerable Software and Affected Versions: Mruby affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the mrb vm exec, mrb vm run, and mrb top run functions. Recommendations: At the moment, there is...

CVE-2021-31580

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 and later, Akkadian Provisioning...

CVE-2021-31580

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 and later, Akkadian Provisioning...

CVE-2021-31580: Improper Neutralization of Special Elements used in an OS Command

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be bypassed by switching the OpenSSH channel from shell to exec and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 and later, Akkadian Provisioning...

CVE-2021-36979

Unicorn Engine 1.0.2 has an out-of-bounds write in tbflusharmeb called from cpuarmexecarmeb and tcgcpuexecarmeb...

PT-2021-21417

Name of the Vulnerable Software and Affected Versions Unicorn Engine version 1.0.2 Description The issue is an out-of-bounds write in the tb flush armeb function, which is called from cpu arm exec armeb and tcg cpu exec armeb. Recommendations For Unicorn Engine version 1.0.2, consider disabling t...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62476)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in the DNS Snap-in in...

The vulnerability of the PostScriptFunction::exec function in the Function.cc component of the Poppler PDF rendering library, related to division by zero, allows a malicious actor to cause a service failure.

The vulnerability of the PostScriptFunction::exec function in the Function.cc component of the Poppler PDF rendering library is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2020-22249

Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious plugin which contains the php files with extensions like PHP,phtml,php7 will be copied to the plugins directory which would lead to the...

Virus.Win32.Shodi.e Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/37d4a5ba123dd32f1e2c4ba0be14e77cB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Shodi.e Vulnerability: Unauthenticated Remote Command Execution Description: The virus...

PT-2024-11348 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The powerpc kernel is not prepared to handle exec faults from kernel. The function is exec fault returns 'false' when an exec fault is taken by kernel, because the check is based on...

PT-2021-28326

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the following functions: mrb vm exec, mrb vm run, mrb top run. Recommendations...

PT-2021-28328

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with a type of UNKNOWN READ. The crash state includes functions such as mrb vm ci env, cipop, and mrb vm exec. No information i...

GHSA-V85C-HGQ5-7PFW Arbitrary Command Injection

This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23399

This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

PT-2021-15491

Name of the Vulnerable Software and Affected Versions wincred versions all Description The issue allows an attacker to execute arbitrary commands if attacker-controlled user input is given to the getCredential function. This is due to the use of the child process exec function without input...

CVE-2021-23399: Improper Neutralization of Special Elements used in an OS Command

This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

HashiCorp Nomad Remote Command Execution Exploit

This Metasploit module lets you create a batch job on HashiCorp's Nomad service to spawn a shell. The default option is to use the rawexec driver, which runs with high privileges. Development servers and clients explicitly enabling the rawexec plugin can spawn these type of jobs. Regular exec job...