EUVD-2024-22262

Malicious code in bioql PyPI...

CVE-2024-24899

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py. This issue...

CVE-2024-24899

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py. This issue...

CVE-2024-24899 Command injection in aops-zeus

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py. This issue...

CVE-2024-24899 Command injection in aops-zeus

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py. This issue...

CVE-2024-24899

CVE-2024-24899 affects openEuler aops-zeus versions 1.2.0–1.4.0, exposing OS command injection via the zeus/conf/constant.py (constant.Py) handling. The root cause is improper neutralization of special elements in commands, enabling a potential attacker to inject commands and impact confidentiali...

CVE-2024-24899: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py. This issue...

aops-zeus 安全漏洞

aops-zeus is a host and user manager service for openEuler, which is the foundation of aops. A security vulnerability exists in openEuler aops-zeus from version 1.2.0 through 1.4.0, which stems from the presence of an operating system command injection issue...

PT-2024-20651 · Openeuler · Aops-Zeus +1

Name of the Vulnerable Software and Affected Versions: openEuler aops-zeus versions 1.2.0 through 1.4.0 Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This problem is...

OESA-2024-1292 aops-zeus security update

A host and user manager service which is the foundation of aops. Security Fixes: In aops-zeus software versions 1.2.01.4.1, there is a vulnerability in the plugin management command of the zeus/conf/constant file. Through this vulnerability, an attacker can implant arbitrary commands to be execut...

OESA-2024-1293 aops-zeus security update

A host and user manager service which is the foundation of aops. Security Fixes: In aops-zeus software versions 1.2.01.4.1, there is a vulnerability in the plugin management command of the zeus/conf/constant file. Through this vulnerability, an attacker can implant arbitrary commands to be execut...