HTTP_ST Component Command Execution

The vulnerability of the HTTPST component in the D-Link DIR-859 router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

D-Link DIR-823G Router Command Injection

The vulnerability of D-Link DIR-823G router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands...

Kubernetes cluster management software Command Execution

The vulnerability of the Kubernetes cluster management software relates to the lack of measures taken to neutralize special elements used in operating systems’ commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands...

Media Streaming add-on Command Injection

The vulnerability of the Media Streaming add-on relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands with root privileges remotely...

Lenovo Service Framework Command Injection

The vulnerability of the Lenovo Service Framework LSF software for processing push notifications on devices running the Android operating system is related to the lack of measures to clean up special elements used in commands. Exploiting this vulnerability allows a malicious actor to execute...

IntraVUE Arbitrary Command Execution

The vulnerability of the IntraVUE visualization and diagnosis software exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...