10 matches found
MAL-2025-34921 Malicious code in test-mlw2-babas-erode (npm)
The package test-mlw2-babas-erode was found to contain malicious code...
CVE-2021-34921
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2024-34921
TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...
CVE-2024-34921
The TOTOLINK X5000R router (version v9.1.0cu.2350_B20230313 ) is vulnerable to a command injection flaw. This issue stems from the disconnectVPN function and the pid parameter within /cgi-bin/cstecgi.cgi , which fails to properly filter special characters and commands. A remote attacker could exp...
CVE-2024-34921
TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...
CVE-2024-34921
TOTOLINK X5000R v9.1.0cu.2350B20230313 was discovered to contain a command injection via the disconnectVPN function...
CVE-2021-34921
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34921
CVE-2021-34921 affects Bentley View 10.15.0.75. The flaw is an out-of-bounds write during JT file parsing, enabling remote code execution when a user opens a malicious JT file or visits a crafted page. User interaction is required. Several sources (ZDI-21-1509; Red Hat RH/CVE entry; CNVD; CNNC; N...