17414 matches found
EulerOS 2.0 SP12 : emacs (EulerOS-SA-2025-1413)
According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands o...
PT-2025-19884 · Dell · Dell Storage Center +1
Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.1.20 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as 'Command Injection'. This could allow a low-privileged attacker wi...
CVE-2025-44872
CVE-2025-44872 affects the Tenda AC9 router (version 15.03.06.42_multi). A command injection flaw exists in the formsetUsbUnload function via the deviceName parameter, allowing an attacker to execute arbitrary commands through a crafted request. Reported impact is high (CVE CVSS v3.1: AV:N/AC:L/P...
PT-2025-18788 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: zibble-zabble firewall matrix versions full-rizzle through wizzle-wazzle Description: A flaw exists in the zibble-zabble firewall matrix that allows remote execution. When blop authentication is enabled, an attacker can execute glop-glop,...
Security Bulletin: Several vulnerabilities affect Watson Machine Learning Accelerator on Cloud Pak for Data 5.0.0
Summary Several vulnerabilities in Watson Machine Learning Accelerator on Cloud Pak for Data 5.0.0 have been fixed in Watson Machine Learning Accelerator on Cloud Pak for Data 5.0 latest refresh. Vulnerability Details CVEID:CVE-2024-3568 DESCRIPTION: Hugging Face Transformers could allow a remote...
Security Bulletin: Apache Tomcat Vulnerabilities Affect IBM Sterling B2B Integrator
Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities. Vulnerability Details CVEID:CVE-2016-8735 DESCRIPTION: Apache Tomcat could allow a remote attacker to execute arbitrary code on the system, caused by an error in the JmxRemoteLifecycleListener. By sending specially...
Malicious code in pretty-cli-logger (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...
CVE-2025-3935
ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys. It is important to note that to obtain these machine keys,...
CraftCMS 代码注入漏洞
CraftCMS is a content management system from CraftCMS, Inc. A security vulnerability exists in CraftCMS versions 3.0.0-RC1 through prior to 3.9.15, 4.0.0-RC1 through prior to 4.14.15, and 5.0.0-RC1 through prior to 5.6.17, which originates from a vulnerability that could lead to remote code...
PLANET WGS-804HPT和PLANET WGS-4215-8T2S 操作系统命令注入漏洞
PLANET WGS-804HPT and PLANET WGS-4215-8T2S are both products of PLANET China.PLANET WGS-804HPT is an innovative industrial-grade 8-port 10/100/1000T wall-mounted managed switch.PLANET WGS-4215-8T2S is an innovative industrial-grade PLANET WGS-4215-8T2S is an innovative industrial grade 8-port...
The vulnerability of the torch.load() function in the PyTorch machine learning framework allows a hacker to execute arbitrary code.
The vulnerability of the torch.load function in the PyTorch machine learning framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2025-2760 GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability
GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
Sonos Era 300 安全漏洞
Sonos Era 300 is a spatial audio speaker with Dolby Atmos Dolby Atmos from Sonos USA. A security vulnerability exists in the Sonos Era 300 that originates from a failure to validate the length of user data during ID3 data processing, which could result in a heap buffer overflow and remote code...
CVE-2025-28035
TOTOLINK A830R V4.1.2cu.5182B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter...
NVIDIA Nemo Framework 代码问题漏洞
NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code issue vulnerability exists in the NVIDIA Nemo Framework, which stems from the fact that deserializing untrusted data could lead to remote code execution and data tampering...
The vulnerability of the SafeInspect system for privileged users stems from the lack of measures taken to protect the structure of the web page. This allows a perpetrator to execute arbitrary HTML code.
The vulnerability of the SafeInspect privilege user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary HTML code remotely...
CVE-2025-29659
Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...
CVE-2025-3797
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admintopic.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
