GHSA-4GXJ-5MMR-7PXQ NASA AIT-Core vulnerable to remote code execution

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

NASA AIT-Core vulnerable to remote code execution

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

CVE-2024-35058

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

CVE-2024-35057

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

CVE-2024-35056

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

PT-2024-26304 · Nasa · Nasa Ait-Core

Name of the Vulnerable Software and Affected Versions: NASA AIT-Core version 2.5.2 Description: An issue in the YAML Python library allows attackers to execute arbitrary commands via supplying a crafted YAML file. Recommendations: For NASA AIT-Core version 2.5.2, at the moment, there is no...

CVE-2024-35056

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

CVE-2024-35060

An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...

CVE-2024-35061

NASA AIT-Core v2.5.2 uses unencrypted network channels, enabling Man‑in‑the‑Middle exposure. The CVE-2024-35061 entry notes that, when chained with CVE-2024-35059 (a Pickle-related arbitrary command execution issue in NASA AIT‑Core v2.5.2), it can lead to unauthenticated remote code execution. Co...

CVE-2024-35060

An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...

CVE-2024-35057

NASA AIT-Core v2.5.2 is affected by CVE-2024-35057, with the issue allowing arbitrary code execution via a crafted packet. The advisory sources from NVD/Red Hat/GHSA/osv indicate the vulnerability resides in the NASA AIT-Core component and implies a high-impact scenario (base CVSS v3.1: 7.5, high...

CVE-2024-35059

An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...

CVE-2024-35060

An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...

CVE-2024-35056

CVE-2024-35056 affects NASA AIT-Core v2.5.2 with multiple SQL injection vulnerabilities in the query_packets and insert functions. The issue is documented across multiple sources (Red Hat, GHSA, OSV, NVD/CVE, and PT-Security) with a high-severity CVSS v3.1 base score of 9.8 (Critical) and network...

CVE-2024-35056

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

NASA AIT-Core 安全漏洞

NASA AIT-Core is a Python-based software suite organized by NASA. A security vulnerability exists in NASA AIT-Core version v2.5.2, which stems from a vulnerability that allows an attacker to execute arbitrary code via a crafted packet...

NASA AIT-Core 安全漏洞

NASA AIT-Core is a Python-based software suite organized by NASA. A security vulnerability exists in NASA AIT-Core version v2.5.2 that stems from the inclusion of multiple SQL injection vulnerabilities via the querypackets and insert functions...

CVE-2024-35058

An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string...

CVE-2024-35059

An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...

PT-2024-26303

Name of the Vulnerable Software and Affected Versions NASA AIT-Core version 2.5.2 Description An issue in the Pickle Python library allows attackers to execute arbitrary commands. Recommendations For NASA AIT-Core version 2.5.2, at the moment, there is no information about a newer version that...