CVE-2026-16733

A flaw was found in bahmutov find-cypress-specs. A local attacker can exploit a vulnerability in the Branch Handler component by manipulating the '--branch' argument. This manipulation leads to an operating system OS command injection, allowing the attacker to execute arbitrary commands on the...

CVE-2019-16733

creationtimestamp| type| source ---|---|--- 2024-03-11 17:16:55+00:00| seen| https://t.me/ctinow/204871...

CVE-2022-37377

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2020-16733

...

CVE-2020-16733

CVE-2020-16733 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2019-16733

processCommandSetUid in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16733

processCommandSetUid in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16733

The CVE-2019-16733 entry describes a root-level command injection in Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30) via processCommandSetUid() in libcommon.so. Exploitation details are not publicly provided in the available documents, but NVD assigns a CVSSv3.1 base score of 9.8 (CR...

CVE-2018-16733

CVE-2018-16733 affects go-ethereum (geth) prior to 1.8.14, where TraceChain in eth/api_tracer.go does not verify that the end block is after the start block. The vulnerability’s root cause is improper validation in the tracing path, potentially enabling malformed block processing and, in some des...

CVE-2017-16733

CVE-2017-16733 affects Ecava IntegraXor (v6.1.1030.1 and earlier). The vulnerability is an SQL Injection in the web interface that can disclose sensitive database information; the batchlist report parsing flaw is a specific instance described by ZDI. Exploitation is shown as remote and unauthenti...

Ecava IntegraXor

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Ecava Equipment: IntegraXor Vulnerabilities: SQL Injection AFFECTED PRODUCTS The following version of IntegraXor, a web SCADA/HMI solution, is affected: Ecava IntegraXor v 6.1.1030.1 and prior. IMPACT Successful...