Ruby OS Command Injection Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the individual developer, Yukihiro Matsumoto. A security vulnerability in Ruby ftpd gem 0.2.1 allows remote attackers to execute arbitrary operating system commands...

GHSA-W5MP-8P8W-MHH8 Command injection in connection-tester

This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. Affected versions of this package are vulnerable to Command Injection...

Skoranga Node-connection-tester Command Injection Vulnerability

Skoranga Node-connection-tester is a Javascript-based software from the individual developers at Skoranga for testing whether a connection can be established to a remote host and port. A command injection vulnerability exists in connection-tester versions prior to 0.2.1, which originates in...

Command Injection

Overview connection-tester is a module that tests to check if the connection can be established or host/port reachable for a given host and port. Useful for testing all the connection in your node application at server startup. Affected versions of this package are vulnerable to Command Injection...

Malicious Package in radicjs

Version 0.2.1 of radicjs contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate your...

CVE-2020-11079

node-dns-sync npm module dns-sync through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1...

CVE-2020-11079 command injection fix in node-dns-sync

node-dns-sync npm module dns-sync through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This has been fixed in 0.2.1...

Prototype Pollution

Overview Affected versions of minimist are vulnerable to prototype pollution. Arguments are not properly sanitized, allowing an attacker to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. Parsing the argument...

CVE-2019-11457

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

PYSEC-2019-174

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

PYSEC-2019-174

Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/...

Sql injection

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

Django CRM 0.2.1 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications Information -------------------- Advisory by Netsparker Name: Multiple CSRF Vulnerabilities in Django CRM 0.2.1 Affected Software: Django CRM Affected Versions: 0.2.1 Homepage: https://github.com/MicroPyramid/Django-CRM Vulnerability: Cross-si...

SUSE SLES15 Security Update : helm-mirror (SUSE-SU-2019:0048-2)

This update for helm-mirror to version 0.2.1 fixes the following issues : Security issues fixed : CVE-2018-16873: Fixed a remote command execution bsc1118897 CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path bsc1118898 CVE-2018-16875: Fixed a CPU denial of...

Path Traversal in simplehttpserver

Versions of simplehttpserver prior to 0.2.1 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 0.2.1 or later...

simplehttpserver path traversal vulnerability (CNVD-2018-25186)

simplehttpserver is a Python based HTTP server for testing, development and debugging of projects. A path traversal vulnerability exists in simplehttpserver 0.2.1 and earlier versions. An attacker can use this vulnerability to list arbitrary files in other folders in the web root directory...

simplehttpserver Path Traversal Vulnerability

simplehttpserver is a Python based HTTP server for testing, development and debugging of projects. A path traversal vulnerability exists in versions of simplehttpserver prior to 0.2.1, which can be exploited by an attacker to list arbitrary files on the server...

CVE-2018-3787

Path traversal in simplehttpserver v0.2.1 allows listing any file on the server...

PT-2018-16204 · Unknown · Simplehttpserver

Name of the Vulnerable Software and Affected Versions: simplehttpserver versions prior to 0.2.1 Description: The issue allows for path traversal, enabling the listing of any file on the server. Recommendations: For versions prior to 0.2.1, update to version 0.2.1 or later to resolve the issue...

Acccheck Command Injection Vulnerability

acccheck is a suite of password brute force tools used in penetration testing to perform Windows authentication over the SMB protocol. A command injection vulnerability exists in the acccheck.pl file in version 0.2.1, which stems from the program's lack of filtering of user input. The vulnerabili...