2266 matches found
Code Injection
setuptools is vulnerable to Code Injection. The vulnerability is due to the packageindex module's download function, which can execute arbitrary OS commands when exposed to user-controlled inputs such as package URLs...
CVE-2024-28749
A remote attacker with high privileges may use a writing file function to inject OS commands...
CVE-2024-28750
A remote attacker with high privileges may use a deleting file function to inject OS commands...
CVE-2024-28748
A remote attacker with high privileges may use a reading file function to inject OS commands...
CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections
A remote attacker with high privileges may use a deleting file function to inject OS commands...
CVE-2024-28750
CVE-2024-28750 : Multiple sources confirm a remote OS command injection in ifm electronic Smart PLC AC14xx/AC4xxS through the delete file function. The vulnerability allows a remote attacker with elevated privileges to inject commands, originating from the delete file operation. CNNVD specifies a...
CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections
A remote attacker with high privileges may use a deleting file function to inject OS commands...
CVE-2024-28749 ifm: Writing file function in Smart PLC allows command injections
A remote attacker with high privileges may use a writing file function to inject OS commands...
CVE-2024-28749
CVE-2024-28749 affects ifm electronic Smart PLC AC14xx/AC4xxS via the Write to File function, enabling OS command injections by a remote attacker with elevated privileges. The issue is described as an OS command injection originating from a remote attacker with high privileges; CVSSv3.1 base scor...
CVE-2024-28749 ifm: Writing file function in Smart PLC allows command injections
A remote attacker with high privileges may use a writing file function to inject OS commands...
CVE-2024-28748 ifm: Reading function in Smart PLC allows command injections
A remote attacker with high privileges may use a reading file function to inject OS commands...
CVE-2024-28748
CVE-2024-28748 affects ifm electronic Smart PLC AC14xx and AC4xxS devices. The issue stems from a read file function that allows a remote attacker with high privileges to inject operating-system commands, enabling potential command execution. Public details in connected documents identify affecte...
CVE-2024-28748 ifm: Reading function in Smart PLC allows command injections
A remote attacker with high privileges may use a reading file function to inject OS commands...
PT-2024-22556 · Ifm · Smart Plc Ac14Xx Firmware +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A remote attacker with high privileges may use a reading file function to inject OS commands. There is no information provided about the estimated numbe...
CVE-2024-38471
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...
CVE-2024-38471
CVE-2024-38471 concerns multiple TP-LINK routers (e.g., Archer AX3000, AXE75, AX5400, Air R5, AXE5400) with an OS command injection vulnerability. The issue allows a network-adjacent attacker who has administrative privileges to execute arbitrary OS commands by restoring a crafted backup file. Th...
CVE-2024-38471
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...
CVE-2024-38471
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...
CVE-2024-39943
CVE-2024-39943 affects rejetto HFS (HTTP File Server) before v0.52.10 on Linux/UNIX/macOS. The root cause is that the server executes OS commands via a shell (execSync) to run df during file upload, enabling remote authenticated users with Upload permissions to achieve remote code execution. Conn...