17 matches found
CVE-2020-15778-SCP-Command-Injection-Check
CVE-2020-15778 – OpenSSH SCP 命令注入漏洞（检测脚本） 关于 CVE-2020-15778 是 OpenSSH（版本 ≤ 8.3p1）提供的 scp 工具中发现的一个命令注入漏洞。该问题允许攻击者在客户端系统上执行任意命令，前提是向 scp 传递了包含反引号的构造目标参数。 此仓库包含一个用 Bash 编写的安全检测与模拟脚本 。该脚本可帮助用户和系统管理员： 识别其系统的 scp 版本是否存在漏洞 了解漏洞的工作原理 测试并检测危险的命令输入（例如包含反引号的参数） 学习如何缓解和避免该漏洞 什么是 CVE-2020-15778？ 在 OpenSSH scp...
CVE-2026-78638
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...
CVE-2026-78638 peerigon unzip-crx/unzip-crx-3 Archive Extraction index.js unzip path traversal
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...
EUVD-2026-65301
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The...
CVE-2026-78638
peerigon unzip-crx and unzip-crx-3 (up to 0.2.0 ) contain a path traversal vulnerability in the unzip function of dist/index.js (Archive Extraction component). Manipulating the destination argument allows writing files outside the intended directory. The attack requires local access with low priv...
CVE-2026-6799 Comfast CF-N1-S Endpoint mbox-config command injection
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of the file /cgi-bin/mbox-config?method=SET§ion=pingconfig of the component Endpoint. Performing a manipulation of the argument destination results in command injection. The...
EUVD-2026-17331
A vulnerability was determined in TRENDnet TEW-713RE up to 1.02. The affected element is the function sub421494 of the file /goform/addRouting. Executing a manipulation of the argument dest can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly...
CVE-2026-2824
A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub441CF4 of the file /cgi-bin/mbox-config?method=SET§ion=pingconfig of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection. The attack may be performed from remote...
CVE-2026-2824
A flaw has been found in Comfast CF-E7 2.6.0.9. This affects the function sub441CF4 of the file /cgi-bin/mbox-config?method=SET§ion=pingconfig of the component webmggnt. Executing a manipulation of the argument destination can lead to command injection. The attack may be performed from remote...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2025-985008)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-985008 advisory. scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the...
PT-2023-19976 · Unknown · Caton Prime
Name of the Vulnerable Software and Affected Versions: Caton Prime version 2.1.2.51.e8d7225049202303031001 Description: A critical issue affects the Ping Handler component, specifically the file "cgi-bin/tools ping.cgi?action=Command", where manipulation of the Destination argument leads to comma...
SUSE CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a...
OESA-2021-1377 openssh security update
OpenSSH is the premier connectivity tool for remote login with the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides a large suite of secure tunneling capabilities, several authentication methods, and...
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
...
DEBIAN-CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a...
ALPINE-CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a...
UBUNTU-CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a...