18169 matches found
Cisco Data Center Network Manager Command Injection (CVE-2019-15978; CVE-2019-15979)
A command injection vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Cisco Data Center Network Manager Arbitrary File Deletion (CVE-2019-15981)
An arbitrary file deletion vulnerability exists in Cisco Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Asus Dsln12e C1 Firmware Command Execution (CVE-2018-15887)
A command execution vulnerability exists in asus dsln12e c1 firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2020-7631
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
CVE-2020-7636
adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function...
Command injection
adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function...
Command injection
node-mpv through 1.4.3 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
Command injection
compass-compile through 0.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via tha options argument...
CVE-2020-7633
apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument...
CVE-2020-7631
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
Vesta Control Panel 0.9.8-26 - Authenticated Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Vesta Control Panel Authenticated Remote Code Execution", 'Description' = %q This module exploits command injection vulnerability in...
Command Injection in ionicabizau/node-gry
Overview The issue occurs because a user input is formatted inside a command that will be executed without any check. Proof of Concept Credit: Mik317 1. Create the following PoC file: js // poc.js const Repo = require"gry"; var myRepo = new Repo"."; myRepo.pull"test; touch HACKED; ", function...
Effect Command Injection Vulnerability
effect is a node program package that allows you to add effects to your images. A command injection vulnerability exists in effect 1.0.4 and earlier. The vulnerability can be exploited to execute arbitrary commands via the options parameter...
pomelo-monitor Command Injection Vulnerability
pomelo-monitor is a monitoring tool for operating systems and processes in nodejs. A command injection vulnerability exists in pomelo-monitor 0.3.7 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary commands...
Op-browser Command Injection Vulnerability
op-browser is a module for opening browser windows and setting up proxies. A command injection vulnerability exists in op-browser 1.0.6 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary commands via the url function...
git-add-remote command injection vulnerability
git-add-remote is a package for adding Git remote repositories. An injection vulnerability exists in git-add-remote 1.0.0 and earlier versions, which stems from a lack of proper validation of user input. A remote attacker can exploit this vulnerability by sending a specially crafted 'name'...
node-key-sender command injection vulnerability
node-key-sender is a module that sends keyboard events to the operating system. A command injection vulnerability exists in node-key-sender 1.0.11 and earlier. An attacker can exploit this vulnerability to execute arbitrary commands via the 'arrParams' parameter in the 'execute' function...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
