5696 matches found
High severity vulnerability that affects espeak-ruby
Withdrawn, accidental duplicate publish. The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or byteswav method in lib/espeak/speech.rb...
GHSA-W655-W578-99PQ High severity vulnerability that affects espeak-ruby
Withdrawn, accidental duplicate publish. The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or byteswav method in lib/espeak/speech.rb...
CVE-2018-15553
fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field...
CVE-2018-15553
fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field...
High severity vulnerability that affects festivaltts4r
Withdrawn, accidental duplicate publish. The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the 1 tospeech or 2 tomp3 method in lib/festivaltts4r/festival4r.rb...
GHSA-9WV8-JGW4-4G28 High severity vulnerability that affects festivaltts4r
Withdrawn, accidental duplicate publish. The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the 1 tospeech or 2 tomp3 method in lib/festivaltts4r/festival4r.rb...
High severity vulnerability that affects colorscore
Withdrawn, accidental duplicate publish. The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the 1 imagepath, 2 colors, or 3 depth variable...
Command injection
upgradehandle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command...
CVE-2018-14933
upgradehandle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command...
CVE-2018-14933
upgradehandle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command...
CVE-2018-14933
upgradehandle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command...
CVE-2018-14933: Improper Neutralization of Special Elements used in an OS Command
upgradehandle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command...
PT-2018-12808 · Nuuo · Nuuo Nvrmini
Name of the Vulnerable Software and Affected Versions: NUUO NVRmini devices affected versions not specified Description: The issue allows for remote command execution via shell metacharacters in the uploaddir parameter for a "writeuploaddir" command in the "upgrade handle.php" file on NUUO NVRmin...
GHSA-WXVM-FH75-MPGR Critical severity vulnerability that affects dns-sync
Withdrawn, accidental duplicate publish. The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...
Code injection
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wpssetuppin parameter to /data/wps.setup.json...
CVE-2018-12692
The CVE-2018-12692 issue affects the TP-Link TL-WA850RE Wi‑Fi Range Extender (hardware version 5). An attacker with valid authentication can trigger remote code execution by supplying shell metacharacters in the wps_setup_pin parameter sent to /data/wps.setup.json, enabling arbitrary command exec...
CVE-2018-12692
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wpssetuppin parameter to /data/wps.setup.json...
CVE-2018-12692: Improper Neutralization of Special Elements used in an OS Command
TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wpssetuppin parameter to /data/wps.setup.json...
Acccheck Command Injection Vulnerability
acccheck is a suite of password brute force tools used in penetration testing to perform Windows authentication over the SMB protocol. A command injection vulnerability exists in the acccheck.pl file in version 0.2.1, which stems from the program's lack of filtering of user input. The vulnerabili...