BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

CVE-2024-42757

Command injection vulnerability in Asus RT-N15U 3.0.0.4.3763754 allows a remote attacker to execute arbitrary code via the netstat function page...

PT-2024-30127

Name of the Vulnerable Software and Affected Versions Asus RT-N15U version 3.0.0.4.376 3754 Description A command injection issue allows a remote attacker to execute arbitrary code via the netstat function page. Recommendations For Asus RT-N15U version 3.0.0.4.376 3754, as a temporary workaround,...

CVE-2024-42757

The Asus RT-N15U wireless router, specifically version 3.0.0.4.376_3754 , is susceptible to a command injection vulnerability. A remote attacker can exploit the netstat function page to achieve arbitrary code execution . The vulnerability is characterized as an improper neutralization of special ...

CVE-2024-42757

Command injection vulnerability in Asus RT-N15U 3.0.0.4.3763754 allows a remote attacker to execute arbitrary code via the netstat function page...

CVE-2024-42757

Command injection vulnerability in Asus RT-N15U 3.0.0.4.3763754 allows a remote attacker to execute arbitrary code via the netstat function page...

CVE-2024-42757: Improper Neutralization of Special Elements used in an OS Command

Command injection vulnerability in Asus RT-N15U 3.0.0.4.3763754 allows a remote attacker to execute arbitrary code via the netstat function page...

ASUS RT-N15U 安全漏洞

The ASUS RT-N15U is a wireless router from Asus China. A security vulnerability exists in the Asus RT-N15U version 3.0.0.4.3763754, which originates from an arbitrary code execution vulnerability in the netstat function...

CVE-2023-6895

Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) contains an OS command injection in /php/ping.php via jsondata[ip], where the attacker-provided input (e.g., netstat -ano) can execute commands. Public exploit details exist; upgrading to version 4.1.0 addresses the issue.

CVE-2023-6895: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

Deserialization of untrusted data

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

Netstat Ingress Connections

Binary data netstatexternalconnections.nbin...

Researchers Uncover Obfuscated Malicious Code in PyPI Python Packages

Four different rogue packages in the Python Package Index PyPI have been found to carry out a number of malicious actions, including dropping malware, deleting the netstat utility, and manipulating the SSH authorizedkeys file. The packages in question are aptx, bingchilling2, httops, and tkint3rs...

Researchers Uncover Obfuscated Malicious Code in PyPI Python Packages

Four different rogue packages in the Python Package Index PyPI have been found to carry out a number of malicious actions, including dropping malware, deleting the netstat utility, and manipulating the SSH authorizedkeys file. The packages in question are aptx, bingchilling2, httops, and tkint3rs...

net-snmp bug fix and enhancement update

An update for net-snmp is now available for Rocky Linux 8.6 Extended Update Support. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP...

CVE-2022-46590

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstatrsname parameter in the toolsnetstat sub41E730 function...

CVE-2022-46589

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstatoption parameter in the toolsnetstat sub41E730 function...

CVE-2022-46590

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstatrsname parameter in the toolsnetstat sub41E730 function...

PT-2022-27916 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the cameo.cameo.netstat option parameter in the tools netstat function, specifically within the sub 41E730 function. Recommendations: For TRENDne...