CVE-2021-4473: Improper Neutralization of Special Elements used in an OS Command

Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...

TOPSEC Internet Behavior Management System 操作系统命令注入漏洞

The TOPSEC Internet Behavior Management System is an online behavior auditing system developed by TOPSEC Corporation. The TOPSEC Internet Behavior Management System has a vulnerability related to operating system command injection. This vulnerability stems from command injection at the endpoints ...

Arbitrary File Download Vulnerability in Reporter Component of Shanghai Newshield Technology Co.

Ltd. "Newshield" was founded in 2009 in Shanghai, is a "network security" as the main axis, to "make the network more secure" for the It is a professional security company with the main axis of "network security" and the mission of "making the network more secure" to provide customers with total...