12977 matches found
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7630
git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...
Command injection
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7625
op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...
CVE-2020-7621
strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the 'nginxCmd' function...
CVE-2020-7623
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7623
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...
CVE-2020-7623
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...
CVE-2020-7621
strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the 'nginxCmd' function...
CVE-2020-7619
get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...
CVE-2020-11107
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary command execution...
Command injection
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary command execution...
CVE-2020-11107
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary command execution...
Command Injection
Overview op-browser is a module that open browser window and set proxy. Affected versions of this package are vulnerable to Command Injection. The url parameter can be controlled by users without any sanitization. PoC var root = require"op-browser"; root.open'chrome','& touch Song','',''; Details...
PT-2020-19663
Name of the Vulnerable Software and Affected Versions karma-mojo versions 1.0.0 through 1.0.1 Description The issue allows execution of arbitrary commands via the config argument, enabling Command Injection attacks. Recommendations For karma-mojo versions 1.0.0 through 1.0.1, consider restricting...
CVE-2020-7621: Improper Neutralization of Special Elements used in an OS Command
strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the 'nginxCmd' function...
CVE-2020-7623: Improper Neutralization of Special Elements used in an OS Command
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...