AZL-6421 CVE-1999-0150 affecting package finger for versions less than 0.17-4

The Perl fingerd program allows arbitrary command execution from remote users...

PT-1997-1065 · Perl · Perl Fingerd

Name of the Vulnerable Software and Affected Versions: Perl fingerd affected versions not specified Description: The issue allows arbitrary command execution from remote users, potentially leading to unauthorized access and control. Recommendations: At the moment, there is no information about a...

CVE-1999-0037

Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail...

SGI IRIX 6.4 - rmail Local Privilege Escalation

SGI IRIX 6.4 - rmail Local Privilege Escalation source: https://www.securityfocus.com/bid/460/info A vulnerability exists in the rmail utility, included by SGI with it's Irix operating system. By failing to sanity check the contents of an environment variable, arbitrary commands may be executed...

OReilly WebSite 1.x2.0 - win-c-sample.exe Buffer Overflow

OReilly WebSite 1.x2.0 - win-c-sample.exe Buffer Overflow source: https://www.securityfocus.com/bid/2078/info O'Reilly WebSite Pro is a Windows 95/NT Web Server package. Versions 2.0 and below contained a vulnerable sample script, win-c-sample.exe, placed by default in /cgi-shl/ off the web root...

PT-1997-1111 · L Soft · Listserv

Name of the Vulnerable Software and Affected Versions: Listserv affected versions not specified Description: A buffer overflow issue in listserv enables arbitrary command execution. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

SGI IRIX 6.4 - 'datman'/'cdman' Local Privilege Escalation

source: https://www.securityfocus.com/bid/347/info A vulnerability exists in the datman/cdman program, as included with Irix 6.2 and 5.3 from Silicon Graphics Inc. The vulnerability would allow arbitrary users to execute commands as root. The datman/cdman program will search for the existance of ...

BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - 'lpr' Buffer Overrun (1)

/ source: https://www.securityfocus.com/bid/707/info BSD/OS 2.1,FreeBSD 2.1.5,NeXTstep 4.0/4.1,SGI IRIX 6.4,SunOS 4.1.3/4.1.4 lpr Buffer Overrun Vulnerability 1 Due to insufficient bounds checking on arguments in this case -C which are supplied by users, it is possible to overwrite the internal...

FreeBSD-SA-96:17.rzsz

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-96:17 Security Advisory Revised: Tue Jul 16 21:44:54 PDT 1996 FreeBSD, Inc. Topic: "Trojan Horse" vulnerability via rz program Category: ports Module: rzsz Announced:...

PT-1996-1011 · Pcnfsd · Pcnfsd

Name of the Vulnerable Software and Affected Versions: pcnfsd affected versions not specified Description: The issue allows local users to change file permissions or execute arbitrary commands through arguments in the RPC call. Recommendations: At the moment, there is no information about a newer...

CVE-1999-0233

IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files...

SGI IRIX 5.2/5.3 - 'serial_ports' Local Privilege Escalation

source: https://www.securityfocus.com/bid/464/info A race condition exists in the serialports administrative program, as included by SGI in the 5.x Irix operating system. This race condition allows regular users to execute arbitrary commands as root. cat /tmp/ls !/bin/sh cp /bin/sh /tmp/foo chmod...

CVE-2024-36604

Tenda O3V2 v1.0.0.123880 was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges...

CVE-2024-33807

A SQL injection vulnerability in /model/getteachertimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

Deserialization of Untrusted Data

Description This affects the package codeception/codeception from 4.0.0 before 4.1.22 and before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input without validation. References...