PT-2015-7803

Name of the Vulnerable Software and Affected Versions Pygments versions 1.2.2 through 2.0.2 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a font name, specifically in the FontManager. get nix font path function in formatters/img.py...

CVE-2015-5673

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal aka eventapp web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command...

PT-2015-7031

Name of the Vulnerable Software and Affected Versions eventapp affected versions not specified Description The issue is related to improper popen calls in the eventapp/lib/gcloud.rb file, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell...

CVE-2015-5673: Improper Neutralization of Special Elements used in an OS Command

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal aka eventapp web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command...

CVE-2007-4038

Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which...

CVE-2004-1170

a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename...

CVE-1999-0210

Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

Command injection

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

CVE-2015-7698

CVE-2015-7698 affects ownCloud Server’s external legacy SMB storage. The issue arises from inadequate neutralization of special characters in SMB user input, enabling remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument (affecting listShares i...

PT-2017-6556

Name of the Vulnerable Software and Affected Versions Roundcube versions prior to 1.1.0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the password, specifically in the DBMail driver of the Password plugin. Recommendations For versions prio...

Code injection

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

CVE-2015-5082

Endian Firewall OS Command Injection vulnerability (CVE-2015-5082) affects Endian Firewall where the CGI script cgi-bin/chpasswd.cgi fails to properly sanitize NEW_PASSWORD_1/NEW_PASSWORD_2, enabling remote command execution via shell metacharacters. Public references document related exploits an...

CVE-2015-5082

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

CVE-2015-5082: Improper Neutralization of Special Elements used in a Command

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

PT-2015-3340

Name of the Vulnerable Software and Affected Versions Pitivi versions prior to 0.95 Description The issue is related to the incorrect handling of code generation in the mediaLibraryPlayCb function in mainwindow.py of the Pitivi video editor. This can be exploited by a remote attacker to execute...

CVE-2015-6912: Improper Neutralization of Special Elements used in a Command

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitlecodepage parameter to subtitle.cgi...

PT-2015-3353

Name of the Vulnerable Software and Affected Versions Cumulus Linux versions 2.5.3 and earlier Description The issue is related to insufficient access control in the Switch Configuration Tools Backend component of Cumulus Linux, allowing local users to execute arbitrary commands. This can be...