CVE-2023-26286

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421...

Exploit for Path Traversal in Wso2 Api_Manager

CVE-2022-29464 - CVE-2022-29464 is a critical vulnerability i...

Exploit for Path Traversal in Wso2 Api_Manager

CVE-2022-29464 - CVE-2022-29464 is a critical vulnerability i...

RHEL 9 : emacs (RHSA-2023:2010)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2010 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the...

CVE-2023-30623 Arbitrary command injection in embano1/wip

embano1/wip is a GitHub Action written in Bash. Prior to version 2, the embano1/wip action uses the github.event.pullrequest.title parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerability due to string interpolation. This...

CVE-2023-30623 Arbitrary command injection in embano1/wip

embano1/wip is a GitHub Action written in Bash. Prior to version 2, the embano1/wip action uses the github.event.pullrequest.title parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerability due to string interpolation. This...

Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout (CVE-2023-28528)

Summary A vulnerability in the AIX invscout command could allow a non-privileged local user to execute arbitrary commands CVE-2023-28528. Vulnerability Details CVEID:CVE-2023-28528 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the invscout command to...

emacs: command injection vulnerability in org-mode

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the function org-babel-execute:latex in ob-latex.el can result in arbitrary command execution...

emacs: command injection vulnerability in org-mode

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the function org-babel-execute:latex in ob-latex.el can result in arbitrary command execution...

TOTOLINK X18 setOpModeCfg function injection vulnerability

TOTOLINK X18 is an AX1800-grade Wi-Fi6 Mesh router system launched by TOTOLINK of China. The TOTOLINK X18 has a command injection vulnerability, which stems from the fact that the host name parameter in the setOpModeCfg function fails to properly filter special characters and commands. Attackers...

TOTOLINK X18 setTracerouteCfg function injection vulnerability

TOTOLINK X18 is an AX1800-grade Wi-Fi6 Mesh router system launched by TOTOLINK of China. The TOTOLINK X18 has a command injection vulnerability, which stems from improper filtering of special characters and commands within the setTracerouteCfg function. Attackers can exploit this vulnerability to...

CVE-2023-1731: Unrestricted Upload of File with Dangerous Type

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands...

IBM AIX security vulnerabilities

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. An elevation of privilege vulnerability exists in IBM AIX, which can be exploited by an attacker to execute arbitrary commands...

CVE-2023-25507

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2023-30621

Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run command on the host machine with sudoer permission. The !ping command when provided with an IP or hostname used to run a bash ping without verification that the IP...

Command injection

Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run command on the host machine with sudoer permission. The !ping command when provided with an IP or hostname used to run a bash ping without verification that the IP...

CVE-2023-30621 OS command injection in Gipsy

Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run command on the host machine with sudoer permission. The !ping command when provided with an IP or hostname used to run a bash ping without verification that the IP...

CVE-2023-30621

Gipsy (Curiosity Open Source)

CVE-2022-36963: Improper Control of Generation of Code

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands...

CVE-2023-30621: Improper Neutralization of Special Elements used in an OS Command

Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run command on the host machine with sudoer permission. The !ping command when provided with an IP or hostname used to run a bash ping without verification that the IP...