CVE-2021-28940

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

CVE-2021-28940

CVE-2021-28940 affects MagpieRSS 0.72 due to an incorrectly escaped exec command in /extlib/Snoopy.class.inc, enabling an attacker to append an extra command to the curl binary. This can be exploited via a crafted https URL in the RSS URL field to execute arbitrary commands on affected scripts (/...

CVE-2020-28940

creationtimestamp| type| source ---|---|--- 2020-12-01 18:54:08+00:00| seen| https://t.me/cibsecurity/16986...

CVE-2020-28940

The CVE concerns Western Digital My Cloud PR4100 NAS running My Cloud OS 5 prior to 5.06.115. The nasAdmin service (listening on TCP ports 80/443) contains an incorrect string-matching flaw that allows an unauthenticated user to bypass authentication and execute commands with root privileges. Imp...