8895 matches found
CVE-2020-9478
CVE-2020-9478 affects Rubrik 5.0.3-2296. The vulnerability is an OS command injection that permits an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems. Exploitation details, affected components beyond the product/version, and concrete remediation steps are not p...
OS Command Injection
clamscan is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands on the system via the isclamavbinary function in index.js...
CVE-2020-6765
CVE-2020-6765 affects D-Link DSL-GS225 J1 AU_1.0.4 where an admin can execute OS commands by placing shell metacharacters after a supported CLI command; the CLI is reachable via TELNET. The issue is a command-injection vulnerability in the device’s CLI parsing. The provided documents do not speci...
OS Command Injection
cacti is vulnerable to OS command injection. Multiple command injection flaws were discovered in Cacti. An authenticated user with certain administrative privileges could use these flaws to execute arbitrary commands on the Cacti server with the privileges of the web server user...
OS Command Injection
clamscan is vulnerable to OS Command Injection. The vulnerability exists through the isclamavbinary function in index.js...
OS Command Injection
apiconnect-cli-plugins is vulnerable to OS command injection. The vulnerability exists the values of pluginUri is not sanitized and can be controlled by users...
CVE-2020-11581
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
Command injection
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
CVE-2020-11581
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
OS Command Injection
node-key-sender is vulnerable to OS command injection. The vulnerability exists through the unsanitized value of arrParams used in exec...
OS Command Injection
effect is vulnerable to OS command injection. The vulnerability exists as it does not sanitize the value of cmd that used by exec...
OS Command Injection
install-package and umount are vulnerable to OS command injection. The vulnerabilities exists as the values of args were not sanitized when used in exec...
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
OS Command Injection
strong-nginx-controller is vulnerable to OS command injection. Lack of validation and sanitization of the action parameter allows an attacker to inject and execute arbitrary OS commands via the nginxCmd function...
OS Command Injection
jscover is vulnerable to OS Command Injection. The vulnerability exists as the source argument is not sanitized and can be controlled by users...
OS Command Injection
get-git-data is vulnerable to OS command injection. The vulnerability exists as the values of cmd is not sanitized...
CVE-2019-10392
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection...
CVE-2019-14905
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS...
DLINK DWL-2600 Authenticated Remote Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DLINK DWL-2600 Authenticated Remote Command Injection', 'Description' = %q Some DLINK Access Points are vulnerable to an authenticated OS command...