122 matches found
CVE-2022-21129
Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...
Malicious code in appium-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6637 Malicious code in appium-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in appium-doc_lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6636 Malicious code in appium-doc_lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
appium-desktop OS Command Injection vulnerability
appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection...
GHSA-XQ6J-X8PQ-G3GR appium-desktop OS Command Injection vulnerability
appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection...
CVE-2023-2479
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
Command injection
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
CVE-2023-2479
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
CVE-2023-2479 OS Command Injection in appium/appium-desktop
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
CVE-2023-2479 OS Command Injection in appium/appium-desktop
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
PT-2023-19784 · Unknown · Appium-Desktop
Name of the Vulnerable Software and Affected Versions: appium-desktop versions prior to 1.22.3-4 Description: The issue is an OS Command Injection, which affects the GitHub repository appium/appium-desktop. Recommendations: For versions prior to 1.22.3-4, update to version 1.22.3-4 or later to...
Appium Desktop 操作系统命令注入漏洞
Appium Desktop is the graphical interface to Appium Server from Appium. An operating system command injection vulnerability exists in versions prior to Appium Desktop v1.22.3-4. An attacker could exploit this vulnerability to perform an OS command injection attack...
CVE-2023-2479
CVE-2023-2479 affects Appium Desktop (appium-desktop) prior to v1.22.3-4. The connected Nuclei template documents an OS Command Injection vulnerability in the Appium Desktop Server, exploitable via an untrusted URL parameter, allowing unauthenticated attackers to execute arbitrary commands and po...
CVE-2023-2479: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
Zero-Click Remote Code Execution
Vulnerability Type Remote Code Execution Affected URL http://127.0.0.1/?anyparameter= Affected Parameter Arbitrary GET parameter Authentication Required? No Issue Summary Multiple vulnerabilities discovered in Appium-Desktop that can be chained together to achieve Zero Click Remote Code Execution...
Command Injection
nemo-appium is vulnerable to Command Injection. The vulnerability exists due to improper input sanitization in the module.exports.setup function of index.js, allowing an attacker to inject and execute malicious commands. To successfully exploit this vulnerability, appium-running 0.1.3 must be...
nemo-appium vulnerable to OS Command Injection
Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...
GHSA-C6RX-GXQV-VR5J nemo-appium vulnerable to OS Command Injection
Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...