Lucene search
+L

196 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:27 p.m.•7 views

Malicious code in Be.Vlaanderen.Basisregisters.AggregatеSoսrce.Testing.CommаոdHandling (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•4 views

Malicious code in Be.Vlaandеren.Basisregisters.CommandHanԁling.Idempotency (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/06/25 1:25 p.m.•7 views

MAL-2024-4174 Malicious code in Be.Vlaandеren.Basіsregisters.CommandHanԁliոg.Idempotency (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•8 views

Malicious code in Be.Vlaandеren.Basіsregisters.CommandHanԁliոg.Idempotency (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:25 p.m.•8 views

Malicious code in Be.Vlaaոderen.Basisregistеrs.CommandHandling (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:24 p.m.•8 views

Malicious code in Be.Vlaaոdereո.Basisrеgistеrs.CommandHandling (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:24 p.m.•5 views

Malicious code in Be.Vlaаnderеո.Basisregisters.CommandHandling.Idempotency.Miсrosoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:23 p.m.•7 views

Malicious code in Bе.Vlaaոderen.Basіsregisters.CommandHandling.SqlStreаmStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/06/24 12:00 a.m.•18 views

OnCell G3470A-LTE Web Server Code Execution

The vulnerability of the web server of the microprogramming software in the industrial cellular LTE modem OnCell G3470A-LTE is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to...

7.5CVSS6AI score0.0044EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2024/06/21 12:00 a.m.•48 views

(Pwn2Own) Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The...

8CVSS7.6AI score0.00817EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2024/04/28 1:15 p.m.•18 views

UBUNTU-CVE-2022-48650

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in qlt24xxhandleabts Commit 8f394da36a36 "scsi: qla2xxx: Drop TARGETSCFLOOKUPLUNFROMTAG" made the qlt24xxhandleabts function return early if tcmqla2xxxfindcmdbytag didn't find a command, but it miss...

4.7CVSS6.1AI score0.00229EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2024/04/23 12:00 a.m.•25 views

com.webos.service.cloudupload Process Analytics Report Privilege Escalation

The vulnerability of the processAnalyticsReport method of the com.webos.service.cloudupload service in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicio...

9.1CVSS7.8AI score0.04667EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/04/19 12:00 a.m.•24 views

Dell Unity Operating Environment svc_cifssupport Command Execution

The vulnerability of the svccifssupport utility in the Dell Unity Operating Environment DELL Unity Operating Environment system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to...

7.8CVSS7.5AI score0.00644EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/20 12:00 a.m.•18 views

ArubaOS CLI Command Execution

The vulnerability of the CLI interface of ArubaOS operating systems is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7.5AI score0.0124EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/07 12:00 a.m.•7 views

PT-2024-40844 · Git +1 · Cras

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include a crash state with functions such as handle at command and handle at command...

7AI score
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2024/01/22 9:21 p.m.•32 views

GHSA-R7QV-8R2H-PG27 Multiple issues involving quote API in shlex

Issue 1: Failure to quote characters Affected versions of this crate allowed the bytes and \xa0 to appear unquoted and unescaped in command arguments. If the output of quote or join is passed to a shell, then what should be a single command argument could be interpreted as multiple arguments. Thi...

3.2CVSS6.3AI score0.00766EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/01/06 12:00 a.m.•17 views

PAN-OS Command Injection Code Execution

The vulnerability of the PAN-OS operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.8CVSS6.7AI score0.01144EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/25 12:00 a.m.•17 views

D-Link G416 Router Code Execution

The vulnerability of the flupl function in D-Link G416 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

8.8CVSS8.1AI score0.00946EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•19 views

PT-2023-21817 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue involves information disclosure in the WLAN HAL when handling commands through WMI interfaces. Recommendations: At the moment, there is no information about a newer version that...

6.1CVSS5.7AI score0.00138EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2023/09/15 7:15 p.m.•13 views

DEBIAN-CVE-2023-36479

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, th...

3.1CVSS6.2AI score0.01162EPSS
SaveExploits1References1
Rows per page
Query Builder