Webbynode Ruby Gems命令注入漏洞

Bugtraq ID:64289 CVE ID:CVE-2013-7086 Ruby Gem Webbynode是一款让用户部署应用至Webbynode平台的工具。 Ruby Gem Webbynode没有正确过滤通过growlnotify命令所提交的消息，如果消息中包含shell元字符，可以应用程序上下文执行任意命令。 0 Ruby Gem Webbynode 1.0.5.3 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://rubygems.org/gems/webbynode...

D-Link routers multiple security vulnerabilities

Shell characters injection, authentication bypass...

torque authentication bypass

It's possible to queue code execution by connecting directly to pbsmom port. Shell characters vulnerability...

PineApp Mail-SeCure privilege escalation

Unfiltered shell characters vulnerability...

DavFS2 privilege escalation

Shell characters vulnerability...

Sybase EAServer multiple security vulnerabilities

Directory traversal, XML injection, shell characters injection...

Flash Tool 0.6.0 Remote Code Execution

Flash Tool 0.6.0 Remote code execution vulnerability 3/1/2013 http://rubygems.org/gems/flashtool https://github.com/milboj/flashtool If files downloaded contain shell characters it's possible to execute code as the client user. ie: flashfile;id/tmp/o;.swf ./flashtool-0.6.0/lib/flashtool.rb Lines:...

OpenVAS Manager code execution

Unescaped shell characters on OMP request processing...

Symantec WebGateway security vulnerabilities

Code execution, unfiltered shell characters...

SuSE 10 Security Update : dhcpcd (ZYPP Patch Number 7453)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note: this is a...

dhcpcd shell characters vulnerability

Shell characters vulnerability in the hostname...

ioQuake3 game engine security vulnerabilities

Shell characters vulnerability, code execution...

logrotate multiple security vulnerabilities

Race conditions, unfiltered shell characters vulnerability, DoS...

XRDB shell characters vulnerability

Shell characters vulnerability via host name...

TeX (tex-common) shell characters vulnerability

No description provided...

logwatch shell characters vulnerability

Shell characters vulnerability on filenames...

Cisco Unified Communications Manager shell characters vulnerability

Shell characters vulnerability in /usr/local/cm/bin/pktCapprotectData suid binary...

Novell PlateSpin Orchestrate shell characters vulnerability

Shell characters vulnerability on graphs rendering...

Ipswitch Imail multiple security vulnerabilities

Format string vulnerabilities, unfiltered shell-characters, code execution...

Spamassasin milter plugin shell characters vulnerability

Shell characters vulnerability via RCPT TO: command...