12671 matches found
TOTOLINK X5000R password parameter command injection vulnerability
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R password parameter, which originates from the password parameter of /cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters,...
TOTOLINK X5000R port parameter command injection vulnerability
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R port parameter, which originates from the port parameter of /cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters, commands, and...
CVE-2024-31396: Improper Control of Generation of Code
Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on...
VulnCheck KEV: CVE-2022-35555
A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...
TOTOLINK X5000R timeout parameter command injection vulnerability
The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R timeout parameter, which originates from the failure of the timeout parameter of /cgi-bin/cstecgi.cgi to properly filter constructed command special characters,...
CVE-2024-22026: Improper Access Control
A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance...
formWlEncrypt Buffer Overflow DoS
The vulnerability of the formWlEncrypt function in Totolink AC1200 router microprogramming software is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cause service failures...
NASA AIT-Core security vulnerabilities
NASA AIT-Core is a Python-based software suite organized by NASA. A security vulnerability exists in NASA AIT-Core version v2.5.2 that originates from allowing an attacker to execute arbitrary commands...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
PT-2024-26303
Name of the Vulnerable Software and Affected Versions NASA AIT-Core version 2.5.2 Description An issue in the Pickle Python library allows attackers to execute arbitrary commands. Recommendations For NASA AIT-Core version 2.5.2, at the moment, there is no information about a newer version that...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
CVE-2024-35059
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
CVE-2024-35060
An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file...
PT-2024-26304 · Nasa · Nasa Ait-Core
Name of the Vulnerable Software and Affected Versions: NASA AIT-Core version 2.5.2 Description: An issue in the YAML Python library allows attackers to execute arbitrary commands via supplying a crafted YAML file. Recommendations: For NASA AIT-Core version 2.5.2, at the moment, there is no...
CVE-2024-35060
The NASA AIT-Core software suite, specifically version v2.5.2 , contains a vulnerability in its YAML Python library . An attacker can exploit this issue by supplying a crafted YAML file to achieve arbitrary command execution . As of the current documentation, there is no information regarding a n...
CVE-2024-35059
NASA AIT-Core v2.5.2 is vulnerable to Remote Code Execution (RCE) due to the unsafe loading of untrusted Pickle files within its Python library. This flaw allows attackers to execute arbitrary commands on the affected system. Notably, when combined with CVE-2024-35061 (which involves unencrypted ...
CVE-2024-35059
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands...
Adobe Dreamweaver OS Command Injection Vulnerability
Adobe Dreamweaver is the United States of America Odooby Adobe company a Windows-based platform to support visual HTML editing and code editing software. An operating system command injection vulnerability exists in Adobe Dreamweaver Desktop prior to version 21.3, which can be exploited by an...
Dell Technologies PowerProtect Data Domain Management Center Command Execution
The software of the Dell Technologies PowerProtect Data Domain Management Center has a vulnerability due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow an attacker to execute arbitrary OS commands...
