8016 matches found
CVE-2022-47339
In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed...
Command injection
PowerPath Management Appliance with versions 3.3 & 3.2, 3.1 & 3.0 contains OS Command Injection vulnerability. An authenticated remote attacker with administrative privileges could potentially exploit the issue and execute commands on the system as the root user...
CVE-2022-34447
PowerPath Management Appliance with versions 3.3 & 3.2, 3.1 & 3.0 contains OS Command Injection vulnerability. An authenticated remote attacker with administrative privileges could potentially exploit the issue and execute commands on the system as the root user...
CVE-2022-34447
PowerPath Management Appliance with versions 3.3 & 3.2, 3.1 & 3.0 contains OS Command Injection vulnerability. An authenticated remote attacker with administrative privileges could potentially exploit the issue and execute commands on the system as the root user...
CVE-2022-34447
Dell PowerPath Management Appliance (VM and Docker containerized) affected: versions 3.0, 3.1, 3.2, 3.3. The issue is an OS Command Injection vulnerability that an authenticated remote attacker with administrative privileges could exploit to run commands as root on the system. Root cause details ...
CVE-2022-43758
A Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in SUSE Rancher allows code execution for user with the ability to add an untrusted Helm catalog or modifying the URL configuration used to download KDM only admin users by default This issue...
Command injection
A Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in SUSE Rancher allows code execution for user with the ability to add an untrusted Helm catalog or modifying the URL configuration used to download KDM only admin users by default This issue...
Command injection
A Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in wrangler of SUSE Rancher allows remote attackers to inject commands in the underlying host via crafted commands passed to Wrangler. This issue affects: SUSE Rancher wrangler version 0.7.3 a...
Exploit for OS Command Injection in Exiftool_Project Exiftool
Introduction CVE-2022-23935 exploit PoC exiftool...
CVE-2023-22643
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...
CVE-2023-22643
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...
CVE-2022-43758
CVE-2022-43758 is an OS Command Injection vulnerability in SUSE Rancher’s Git package that allows code execution when a user adds an untrusted Helm catalog or corrupts the KDM URL configuration. Affected Rancher versions include 2.5.x before 2.5.17, 2.6.x before 2.6.10, and 2.7.x before 2.7.1. Th...
CVE-2022-31249
CVE-2022-31249 (Rancher Wrangler) is an OS command injection vulnerability in the Wrangler component of SUSE Rancher. The issue arises from how Wrangler uses the host Git binary to perform operations, allowing remote attackers to pass specially crafted commands that are executed on the underlying...
CVE-2022-31249 [RANCHER] OS command injection in Rancher and Fleet
A Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in wrangler of SUSE Rancher allows remote attackers to inject commands in the underlying host via crafted commands passed to Wrangler. This issue affects: SUSE Rancher wrangler version 0.7.3 a...
CVE-2023-22643
CVE-2023-22643 affects libzypp-plugin-appdata in SUSE Linux Enterprise Server for SAP 15-SP3 and openSUSE Leap 15.4. The issue is an OS command injection vulnerability due to improper neutralization of special elements in repo configuration (REPO_ALIAS, REPO_TYPE, REPO_METADATA_PATH) that can be ...
PT-2023-2359 · D Link · D-Link Dir-820L
Name of the Vulnerable Software and Affected Versions: D-Link DIR820LA1 FW105B03 Description: The issue is an OS Command injection vulnerability that allows attackers to escalate privileges to root via a crafted payload with the ping addr parameter to ping.ccp. This vulnerability exists due to th...
CVE-2022-31249 [RANCHER] OS command injection in Rancher and Fleet
A Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in wrangler of SUSE Rancher allows remote attackers to inject commands in the underlying host via crafted commands passed to Wrangler. This issue affects: SUSE Rancher wrangler version 0.7.3 a...
CVE-2022-31249 [RANCHER] OS command injection in Rancher and Fleet
A Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in wrangler of SUSE Rancher allows remote attackers to inject commands in the underlying host via crafted commands passed to Wrangler. This issue affects: SUSE Rancher wrangler version 0.7.3 a...
CVE-2022-43758 Rancher: Command injection in Git package
A Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in SUSE Rancher allows code execution for user with the ability to add an untrusted Helm catalog or modifying the URL configuration used to download KDM only admin users by default This issue...