5697 matches found
CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...
ALPINE-CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...
CVE-2017-14500
Removed by vendor...
CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...
CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...
CVE-2017-14500
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure i.e., a podcast file that includes shell...
PT-2017-13491
Name of the Vulnerable Software and Affected Versions Newsbeuter versions 0.3 through 2.9 Description The issue is related to improper neutralization of special elements used in an OS command in the podcast playback function of Podbeuter. This allows remote attackers to perform user-assisted code...
CVE-2017-14429
The DHCP client on D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allows unauthenticated remote code execution as root because /etc/services/INET/inetipv4.php mishandles shell metacharacters, affecting generated files such as...
CVE-2017-14429
The DHCP client on D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allows unauthenticated remote code execution as root because /etc/services/INET/inetipv4.php mishandles shell metacharacters, affecting generated files such as...
CVE-2017-14405
The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...
CVE-2017-14405
The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...
CVE-2017-14405
The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...
CVE-2017-14405
Affected software: EyesOfNetwork web interface (eonweb) 5.1-0. Vulnerability type: remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_device/index.php. Root cause: unsanitized/unchecked input in the hosts_cacti parameter. Impact (as per sources): at...
CVE-2017-14405: Improper Neutralization of Special Elements used in an OS Command
The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...
CVE-2017-14429: Improper Neutralization of Special Elements used in an OS Command
The DHCP client on D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allows unauthenticated remote code execution as root because /etc/services/INET/inetipv4.php mishandles shell metacharacters, affecting generated files such as...
PT-2017-3002
Name of the Vulnerable Software and Affected Versions Git versions 2.10.5 and earlier, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 Description The issue is related to the use of unsafe Perl scripts to support subcommands such as cvsserver, allowing...
Code injection
T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...
CVE-2017-13713
CVE-2017-13713 affects the Gongjin Electronics T&W WIFI Repeater BE126. The issue is a remote code execution vulnerability: remote authenticated users can execute arbitrary code by sending shell metacharacters in the user parameter to cgi-bin/webupg. Public PoC demonstrates HTTP POST with a craft...
PT-2017-13039
Name of the Vulnerable Software and Affected Versions T&W WIFI Repeater BE126 version not specified Description The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to "cgi-bin/webupg". Recommendations For T&W WIFI Repeater BE126,...
CVE-2017-13713: Improper Neutralization of Special Elements used in an OS Command
T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...