PYSEC-2023-116

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

Design/Logic Flaw

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37659

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

CVE-2023-37656 affects WebsiteGuide v0.2. The vulnerability is Remote Command Execution (RCE) via image upload, with a high-severity CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The Connected documents provide no explicit remediation steps or patched versions. There is no de...

CVE-2023-37659

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37659

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

Spring Cloud 3.2.2 - Remote Command Execution Exploit

Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...

ASUS RT-AC86 CGI Arbitrary Command Execution

The vulnerability of the cgi microprogramming system in ASUS RT-AC86 Wi-Fi routers lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cause service interruptions...

HPESBNW04490 rev.2 - HPE ArubaOS, Multiple Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS; Remote: Arbitrary Command Execution, Cross-Site Scripting XSS, Denial of Service DoS, Directory Traversal, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Operating System Softwar...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37659: Improper Control of Generation of Code

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37656: Unrestricted Upload of File with Dangerous Type

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

ASUS RT-AC86 Router Command Execution

The vulnerability of ASUS RT-AC86 Wi-Fi routers’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cause service...

PT-2023-26061 · Unknown · Websiteguide

Name of the Vulnerable Software and Affected Versions: WebsiteGuide version 0.2 Description: The issue allows for Remote Command Execution RCE via image upload. Recommendations: For version 0.2, at the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

WebsiteGuide Code Issues and Vulnerabilities

WebsiteGuide is a web site navigation system. A security vulnerability exists in WebsiteGuide v0.2 that stems from vulnerability to Remote Command Execution RCE attacks via image upload...

xalpha code injection vulnerability

xalpha is the full process management of a fund investment by Shixin Zhang, an individual developer in China. A security vulnerability exists in xalpha version v0.11.4, which stems from vulnerability to Remote Command Execution RCE attacks...