CVE-2020-7805

An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...

CVE-2020-7805

An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...

CVE-2020-7805

CVE-2020-7805 affects KT Slim egg IML500 (R7283, R8112, R8424) and IML520 (R8112, R8368, R8411) WiFi devices. The vulnerability is a command injection that allows an attacker to execute arbitrary OS commands. The connected documents provide the affected device models and the nature of the flaw bu...

PT-2020-19802

Name of the Vulnerable Software and Affected Versions KT Slim egg IML500 versions R7283, R8112, R8424 KT Slim egg IML520 versions R8112, R8368, R8411 Description The issue discovered is a command injection, allowing attackers to execute arbitrary OS commands. This affects the wifi device...

CVE-2020-7805: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...

CVE-2020-5569

CVE-2020-5569 is an unquoted search path vulnerability in HDD Password tool for Windows (versions up to 1.20.6620) affecting CANVIO PREMIUM 3TB/2TB/1TB and CANVIO SLIM 1TB/500GB devices, where Windows services are registered with unquoted file paths. If a path with spaces is present, a malicious ...

JVN#13467854: Toshiba Electronic Devices & Storage software registers unquoted service paths

Some of Toshiba Electronic Devices & Storage software registers Windows services with unquoted file paths CWE-428. Impact When a registered path contains spaces, and a malicious executable is placed on a certain path, it may be executed with the privilege of the Windows service. Solution The...

DEBIAN-CVE-2013-4412

slim has NULL pointer dereference when using crypt method from glibc 2.17...

CVE-2013-4412

slim has NULL pointer dereference when using crypt method from glibc 2.17...

Null pointer dereference

slim has NULL pointer dereference when using crypt method from glibc 2.17...

CVE-2013-4412

slim has NULL pointer dereference when using crypt method from glibc 2.17...

CVE-2013-4412

slim has NULL pointer dereference when using crypt method from glibc 2.17...

CVE-2013-4412

slim has NULL pointer dereference when using crypt method from glibc 2.17...

CVE-2013-4412

CVE-2013-4412 affects slim, with a NULL pointer dereference when using the crypt() function from glibc 2.17. The connected records confirm the description across multiple sources (NVD, OSV, Ubuntu/Debian advisories, and vendor entries), but none provide concrete details on affected versions beyon...

CVE-2013-4412

slim has NULL pointer dereference when using crypt method from glibc 2.17...

PT-2019-6950 · Gnu · Glibc

Name of the Vulnerable Software and Affected Versions: slim affected versions not specified Description: The issue is related to a NULL pointer dereference in slim when using the crypt method from glibc 2.17. Recommendations: At the moment, there is no information about a newer version that...

CVE-2013-4412: NULL Pointer Dereference

slim has NULL pointer dereference when using crypt method from glibc 2.17...

JobSkee Open Source JobBoard 1.1.3 Database Disclosure

Exploit Title : JobSkee Open Source JobBoard 1.1.3 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/04/2019 Vendor Homepage : jobskee.com Software Download Link : jobskee.com/download.php Software Information Link :...

Zomato: Potential server misconfiguration leads to disclosure of vendor/ directory

Hi, Apologies for the weakness label, it was the closest I could find for what appears to be a server misconfiguration. Typically, in MVC frameworks like Slim which I see you are using here, Symfony, Laravel, etc., the front controller is the only thing exposed, leaving vendor/, logs/, and others...

Remote Code Execution (RCE)

Slim is vulnerable to Remote Code Execution RCE through PHP Object Injections. A malicious user can inject and execute arbitrary code when deserialising a SessionCookie object...