SUSE CVE-2023-2491

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise...

SUSE CVE-2023-28617

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters...

TOTOLINK A3300R 安全漏洞

The TOTOLINK A3300R is a wireless router manufactured by China's Gion Electronics TOTOLINK for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the filename parameter of the UploadFirmwareFile function failing to properly filt...

SUSE CVE-2023-5043

Ingress nginx annotation injection causes arbitrary command execution...

Tenda W18E Command Injection Vulnerability

The Tenda W18E is a wireless router from the Chinese company Tenda. Tenda W18E suffers from a command injection vulnerability, which originates from the hostName parameter in the formSetNetCheckTools function failing to correctly filter the constructor command special characters, commands, etc...

F5 BIG-IP Configuration utility SQL Injection Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A SQL injection vulnerability exists in the F5 BIG-IP Configuration utility, which stems from the presence of a SQL injection...

Ingress nginx annotation injection causes arbitrary command execution

Issue Details A security issue was identified in ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation on an Ingress object in the networking.k8s.io or extensions API group can be used to inject arbitrary commands, and obtain the credentials of the ingress-nginx...

CVE-2023-5043

Ingress nginx annotation injection causes arbitrary command execution...

CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution

Ingress nginx annotation injection causes arbitrary command execution...

CVE-2023-5043

CVE-2023-5043 affects Kubernetes ingress-nginx where the nginx.ingress.kubernetes.io/configuration-snippet annotation injection allows a remote authenticated attacker to execute arbitrary commands on the system due to improper input validation. IBM’s bulletin associates this CVE with IBM Cloud Ku...

CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution

Ingress nginx annotation injection causes arbitrary command execution...

CVE-2023-46010

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the adminsafe.php component...

CVE-2023-46010

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the adminsafe.php component...

CVE-2023-46010

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the adminsafe.php component...

Tenda W18E 命令注入漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. Tenda W18E suffers from a command injection vulnerability, which originates from the hostName parameter in the formSetNetCheckTools function failing to correctly filter the constructor command special characters, commands, etc...

Ingress NGINX Controller Injection Vulnerability

Ingress NGINX Controller is a Kubernetes open source entry controller for Kubernetes. A security vulnerability exists in Ingress NGINX Controller. An attacker can exploit this vulnerability to execute arbitrary commands...

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to be used to manage video-on-demand resources. A security vulnerability exists in SeaCMS version v.12.9. An attacker can exploit this vulnerability to execute arbitrary commands via th...

NetModule Router Software Operating System Command Injection Vulnerability

NetModule Router Software is a router from NetModule. A security vulnerability exists in NetModule Router Software NRSW versions 4.6.x prior to 4.6.0.106 and 4.8.x prior to 4.8.0.101, which originates from the construction of operating system commands using unpurified user input, and which can be...

CVE-2023-40145

In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to the device...

CVE-2023-40145

CVE-2023-40145 is an OS Command Injection in Weintek cMT3000 HMI Web CGI (cgi-bin area). The vulnerability allows an anonymous attacker, after login, to execute arbitrary commands on affected devices. The issue is classified under CWE-78 (OS Command Injection) and is part of a pair of flaws affec...