Lucene search
K

726 matches found

Positive Technologies
Positive Technologies
added 2018/05/09 12:0 a.m.2 views

PT-2018-5670 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the add ip function, resulting in arbitrary command execution with the privileges...

10CVSS9.8AI score0.08861EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2018/05/09 12:0 a.m.2 views

PT-2018-5673 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the clear ip function, resulting in arbitrary command execution with the privileg...

10CVSS9.8AI score0.08861EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2018/05/09 12:0 a.m.2 views

PT-2018-5675 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the clear ip function, resulting in arbitrary command execution with the privileg...

10CVSS9.6AI score0.08861EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2018/05/09 12:0 a.m.2 views

PT-2018-5676 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the MMM::Agent::Helpers::Network::send arp function, resulting in arbitrary comma...

10CVSS9.6AI score0.07445EPSS
Exploits2References2
Packet Storm
Packet Storm
added 2018/05/03 12:0 a.m.138 views

Exim base64d Remote Code Execution

!/usr/bin/python import time import socket import struct s = None f = None def logo: print print " CVE-2018-6789 Poc Exploit" print "@straightblast ; [email protected]" print def connecthost, port: global s global f s = socket.createconnectionhost,port f = s.makefile'rw', bufsize=0 def p...

7.5CVSS0.1AI score0.86592EPSS
Exploits19
NVD
NVD
added 2018/03/01 8:29 p.m.9 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS8.1AI score0.00549EPSS
Exploits0References3
OSV
OSV
added 2018/03/01 8:29 p.m.15 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS8.2AI score0.00549EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2018/03/01 8:29 p.m.15 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS7.2AI score0.00549EPSS
Exploits0References2
OSV
OSV
added 2018/03/01 8:29 p.m.1 views

UBUNTU-CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS7.2AI score0.00549EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/03/01 7:0 p.m.17 views

CVE-2017-9274 osc executes spec code during "osc commit"

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS8AI score0.00549EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2018/03/01 7:0 p.m.17 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS8.2AI score0.00549EPSS
Exploits0
CVE
CVE
added 2018/03/01 7:0 p.m.49 views

CVE-2017-9274

CVE-2017-9274 describes a shell command injection in the OpenBuild/OpenSUSE component obs-service-source_validator (before version 0.7 ). The underlying issue allows an attacker to execute arbitrary code as the packager when validating RPM SPEC files that use specific macro constructs. Multiple c...

9.3CVSS8AI score0.00549EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/11/17 8:29 p.m.10 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10CVSS10AI score0.0707EPSS
Exploits0References4
CVE
CVE
added 2017/11/17 8:0 p.m.42 views

CVE-2017-1000215

CVE-2017-1000215 affects ROOT xrootd versions 4.6.0 and earlier, exposing an unauthenticated shell command injection that enables remote code execution. The vulnerability is documented across multiple advisories (NVD, SUSE, Gentoo GLSA) indicating remote code execution via a shell command injecti...

10CVSS10AI score0.0707EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2017/11/17 8:0 p.m.12 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10AI score0.0707EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2017/11/17 8:0 p.m.14 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10CVSS5.9AI score0.0707EPSS
Exploits0
NVD
NVD
added 2017/11/07 9:29 p.m.7 views

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

10CVSS10AI score0.07789EPSS
Exploits0References4
Cvelist
Cvelist
added 2017/11/07 9:0 p.m.12 views

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

9.9AI score0.07789EPSS
Exploits0References4
OSV
OSV
added 2017/10/24 6:33 p.m.9 views

GHSA-P673-HJF2-PWFR Shell command injection in command_wrap

commandwrap.rb in the commandwrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename...

7.5CVSS7.5AI score0.00731EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.25 views

Shell command injection in command_wrap

commandwrap.rb in the commandwrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename...

7.5CVSS7.3AI score0.00731EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder