716 matches found
XWiki Platform 代码注入漏洞
XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform version 12.9-rc-112.9-rc-1 and prior versions, which stems from allowing a logged in user to add dangerous content to the...
Chatwork 代码注入漏洞
Chatwork is a business group chat application from Chatwork, Inc. A security vulnerability exists in Chatwork Desktop Application version 2.6.43 and earlier, which stems from a code injection vulnerability that allows a non-administrative user to store and access audio and image data for the...
OpenEMR 代码注入漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A code injection vulnerability previously existed in OpenEMR version 7.0.1. No...
Schneider Electric StruxureWare Data Center Expert Code Injection Vulnerability
Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. A code injection vulnerability exists i...
Arbitrary Code Injection
vm2 is vulnerable to Code Injection. The vulnerability exists due to lack of exception sanitization in the handleException function which allows an attacker to inject and execute malicious code and break out of the sandboxed enviroment...
XWiki Commons 代码注入漏洞
XWiki Commons is a technology library shared by several other top XWiki projects. A security vulnerability exists in XWiki Commons, which stems from the fact that any user with editing privileges can execute arbitrary Groovy, Python, or Velocity code in XWiki to gain full access to the XWiki...
XWiki Platform 代码注入漏洞
XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the French company XWiki. A security vulnerability exists in XWiki Platform that originates from the ability of any user to execute arbitrary Groovy, Python or Velocity code in XWiki...
Input validation
Improper Input Validation vulnerability in OTRS AG OTRS ACL modules, OTRS AG OTRS Community Edition ACL modules allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names This issue affects OTRS: from 7.0...
CVE-2023-1482 HkCms External Plugin code injection
A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack...
SAP BusinessObjects Business Intelligence Platform Code Injection (3245526)
The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a code injection vulnerability. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number...
CVE-2023-25616 Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)
In some scenario, SAP Business Objects Business Intelligence Platform CMC - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact th...
Exploit for Code Injection in Phpunit_Project Phpunit
MASS CVE-2017-9841 Usage sh apt install python...
Debian: Security Advisory (DLA-562-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Baicells EG7035-M11 命令注入漏洞
The Baicells EG7035-M11 is an LTE Outdoor CPE from Baicells USA. A security vulnerability exists in the Baicells EG7035-M11 BCE-ODU-1.0.8 version and prior versions, which stems from vulnerability to improper code injection via HTTP GET commands...
MarkText 代码注入漏洞
MarkText is a simple and elegant open source Markdown editor focused on speed and usability. A code injection vulnerability exists in MarkText version 0.17.1 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary code...
Dell EMC NetWorker 代码注入漏洞
Dell EMC NetWorker is a suite of unified backup and recovery software from Dell USA. The software provides backup and recovery, deduplication elimination, backup reporting, and other features. A code injection vulnerability exists in Dell EMC NetWorker. An unauthenticated, remote attacker can sen...
CVE-2022-34456
Dell EMC Metro node, Versions prior to 7.1, contain a Code Injection Vulnerability. An authenticated nonprivileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application...
CVE-2023-0297
PyLoad 0.5.0 pre-auth RCE (CVE-2023-0297) via code injection in js2py exposed by the flash/addcrypted2 endpoint. Exploitation is unauthenticated and can be triggered by sending crafted requests to /flash/addcrypted2, enabling remote code execution on affected systems. Multiple connected sources c...
PT-2023-16152
Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev31 Description The issue concerns a code injection vulnerability in the pyload/pyload GitHub repository. It allows for pre-authentication remote code execution RCE due to the integration of JavaScript...