PT-2014-5076

Name of the Vulnerable Software and Affected Versions IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter in the systest.php fil...

[DLA 31-1] reportbug security update

Package : reportbug Version : 4.12.6+deb6u1 CVE ID : CVE-2014-0479 Fix CVE-2014-0479: Arbitrary code execution in compareversions. A man-in-the-middle attacker could put shell metacharacters in the version number, causing execution of code of their choice...

CVE-2014-5090

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel...

Code injection

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel...

CVE-2014-5090: Improper Control of Generation of Code

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel...

PT-2014-6273

Name of the Vulnerable Software and Affected Versions Status2k affected versions not specified Description The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel. This is possible due to a la...

Debian DSA-2997-1 : reportbug - security update

Jakub Wilk discovered a remote command execution flaw in reportbug, a tool to report bugs in the Debian distribution. A man-in-the-middle attacker could put shell metacharacters in the version number allowing arbitrary code execution with the privileges of the user running reportbug. %NASLMINLEVE...

DSA-2997-1 reportbug - security update

Bulletin has no description...

Code injection

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter...

PT-2014-6289

Name of the Vulnerable Software and Affected Versions Fonality trixbox affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter in the maint/modules/home/index.php file. Recommendations At the moment...

CVE-2014-5112: Improper Control of Generation of Code

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter...

CVE-2014-5023

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...

Design/Logic Flaw

Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/...

CVE-2013-7392: Undefined Security Weakness

Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/...

PT-2014-5942

Name of the Vulnerable Software and Affected Versions Gitlist versions prior to 0.5.0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a blame, file, or stats page. This can be demonstrated by request...

CVE-2014-4511: Undefined Security Weakness

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a 1 blame, 2 file, or 3 stats page, as demonstrated by requests to blame/master/, master/, and stats/master/...

PT-2014-3415

Name of the Vulnerable Software and Affected Versions Gitlist affected versions not specified Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/. Recommendations At the moment, there is no information about a newer versio...

PT-2014-6255

Name of the Vulnerable Software and Affected Versions Gitter versions affected versions not specified Description The issue allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name. This can be demonstrated by a "git checkout -b"...

CVE-2014-5023: Undefined Security Weakness

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...

Code injection

TimThumb 2.8.13 and WordThumb 1.07, when Webshot aka Webshots is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter...