17432 matches found
Advantech R-SeeNet SQL注入漏洞
Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to SQL injection, which can be exploited by remote attackers ...
Commvault CommCell DataProvider JavaScript Sandbox Escape Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DataProvider class. T...
[SECURITY] [DLA 2823-1] salt security update
Debian LTS Advisory DLA-2823-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 19, 2021 https://wiki.debian.org/LTS Package : salt Version : 2016.11.2+ds-1+deb9u8 CVE ID : CVE-2021-21996 Debian Bug : 994016 Jonathan Schlue discovered a vulnerability in...
GHSA-Q5MQ-6FJG-4MW8 SQL Injection in thinkjs
SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...
In uClibc and uClibc-ng before 1.0.39 incorrect handling of special characters in domain names returned by DNS servers via gethostbyname getaddrinfo gethostbyaddr and getnameinfo can lead to output of wrong hostnames (leading to domain hijacking) or injection into applications (leading to remote code execution XSS applications crashes etc.). In other words a validation step which is expected in any stub resolver does not occur.
...
The vulnerability of the BKHOdeq.exe component in Yokogawa’s software products allows a hacker to execute arbitrary code with user privileges of the CENTUM system.
The vulnerability of the “BKHOdeq.exe” service in Yokogawa’s software products is caused by a buffer overflow based on a stack. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code with user privileges of CENTUM, by sending a specially created package to...
CVE-2021-33816
The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...
Code injection
The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shellexec are blocked but backticks are not blocked...
CVE-2021-40442
Microsoft Excel Remote Code Execution Vulnerability...
The vulnerability of the character determination function in the implementation of the Unicode standard, related to errors in code generation using homoglyphs, allows a violator to execute arbitrary code.
The vulnerability of the character determination function in the implementation of the Unicode standard is related to errors in code generation using homoglyphs. Exploiting this vulnerability can allow a remote attacker to generate arbitrary codes...
EUVD-2021-29343
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service...
Exploit for Code Injection in Gitlab
Vuln Impact An issue has been discovered in GitLab CE/EE af...
CVE-2021-38488
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute code...
CVE-2021-38403
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter supplier of the API maintenance, which may allow an attacker to remotely execute code...
VulnCheck KEV: CVE-2020-4428
IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�...
VulnCheck KEV: CVE-2020-1147
Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for...
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution...
Alert! Hackers Exploiting GitLab Unauthenticated RCE Flaw in the Wild
A now-patched critical remote code execution RCE vulnerability in GitLab's web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to attacks. Tracked as CVE-2021-22205, the issue...