18576 matches found
GHSA-7CHV-RRW6-W6FC XStream is vulnerable to a Remote Command Execution attack
Impact The vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...
XStream is vulnerable to a Remote Command Execution attack
Impact The vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required...
CVE-2021-32305
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter...
CVE-2020-20951
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
CVE-2020-20951
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
Design/Logic Flaw
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
CVE-2021-32305
WebSVN (versions prior to 2.6.1) is affected by CVE-2021-32305, a remote code execution vulnerability where an attacker can inject shell metacharacters via the search parameter to execute arbitrary commands on the server. The issue is caused by unsafely handling the search input and is rated high...
CVE-2020-20951
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
CVE-2020-20951
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
CVE-2020-20951
Pluck 4.7.10-dev2 is affected by a remote command execution vulnerability in the admin background during file uploads. The issue is documented across multiple sources (e.g., PT-2021-10562) without specific CVE root-cause details in the connected set, and no official patch version is provided in t...
Backdoor.Win32.Delf.aez Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/be4a6274679ca966a1d99140db54c25a.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.aez Vulnerability: Unauthenticated Remote Command Execution Description: The...
PT-2021-10562 · Pluck · Pluck
Name of the Vulnerable Software and Affected Versions: Pluck version 4.7.10-dev2 Description: A remote command execution issue exists in the admin background when uploading files. Recommendations: For Pluck version 4.7.10-dev2, as a temporary workaround, consider restricting file uploads in the...
CVE-2020-20951: Improper Neutralization of Special Elements used in a Command
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files...
LibreOffice security feature issues, vulnerabilities
LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes the Writer text documents, Calc spreadsheets, and Impress presentations applications. LibreOffice suffers from a security signature issue vulnerability that arises from incorrect input...
Pluck command injection vulnerability
Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck-4.7.10-dev2, which originates from the admin background, and a remote command execution vulnerability exists when uploading files...
YFCMF Remote Command Execution Vulnerability
YFCMF is Hunan Renren Technology Co., Ltd. developed a set of back-end content management framework based on ThinkPHP5.1. + foreign ACE1.40 UI template. A remote command execution vulnerability exists in YFCMF v2.3.1. An attacker can exploit this vulnerability by sending a constructed POST messag...
XStream远程代码执行漏洞（CVE-2021-29505）
CVE-2021-29505 Vulnerability CVE-2021-29505: XStream is vulnerable to a Remote Command Execution attack. Affected Versions All versions until and including version 1.4.16 are affected, if using the version out of the box. No user is affected, who followed the recommendation to setup XStream's...
HashiCorp Nomad Remote Command Execution
Create a batch job on HashiCorp's Nomad service to spawn a shell. The default option is to use the 'rawexec' driver, which runs with high privileges. Development servers and client's explicitly enabling the 'rawexec' plugin can spawn these type of jobs. Regular 'exec' jobs can be created in a...