33 matches found
EUVD-2022-7682
Malicious code in bioql PyPI...
EUVD-2022-7765
Malicious code in bioql PyPI...
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
OS Command Injection
nadesiko3 is vulnerable to OS command injection. The vulnerability exists due to compression and decompression which allows an attacker to inject and execute arbitrary commands...
OS Command Injection
nadesiko3 is vulnerable to os command injection. The vulnerability exists in multiple functions in index.mjs because appkey is not properly validated which allows an attacker to inject and execute arbitrary commands into the system via the file parameter...
GHSA-M8R5-7WF4-63MW Nadesiko3 OS Command Injection vulnerability
OS command injection vulnerability in Nadesiko3 PC Version v3.3.68 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product. Release notes for versions 3.3.62 and 3.3.69 both link to patches for this particular issue. The...
nadesiko3php (0.0.10) potentially affected by CVE-2022-41642 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-41642 Source advisory: OSV:GHSA-M8R5-7WF4-63MW...
nadesiko3php (0.0.10) potentially affected by CVE-2022-42496 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-42496 Source advisory: OSV:GHSA-7249-8X22-4RG4...
Nadesiko3 OS Command Injection vulnerability
OS command injection vulnerability in Nadesiko3 PC Version v3.3.68 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product. Release notes for versions 3.3.62 and 3.3.69 both link to patches for this particular issue. The...
nadesiko3php (0.0.10) potentially affected by CVE-2022-41642 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-41642 Source advisory: GHSA-M8R5-7WF4-63MW...
nadesiko3php (0.0.10) potentially affected by CVE-2022-41777 via nadesiko3 (3.2.52)
nadesiko3 NPM version 3.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on nadesiko3 and may be impacted: - nadesiko3php 0.0.10 Source cves: CVE-2022-41777 Source advisory: OSV:GHSA-X2JX-W3WM-9P3P...
CVE-2022-42496
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 PC Version v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product...
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
Command injection
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
Command injection
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 PC Version v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product...
Input validation
Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 PC Version v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to crash...
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 PC Version v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product...
CVE-2022-42496: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 PC Version v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product...