8140 matches found
TOTOLINK A3300R setUrlFilterRules Method Command Injection Vulnerability
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the url parameter of the setUrlFilterRules method failing to...
CVE-2023-6078
An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution...
CVE-2023-6078 OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023
An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution...
Dassault Systemes BIOVIA Materials Studio Security Vulnerability
Dassault Systemes BIOVIA Materials Studio is a software for materials simulation and modeling from Dassault Systemes France. A security vulnerability exists in Dassault Systemes BIOVIA Materials Studio versions 2021 through 2023, which stems from an operating system command injection vulnerabilit...
The vulnerability of the ILIAS learning management and support system, related to the improper implementation of the sequence of actions to be performed, allows a perpetrator to execute arbitrary system commands on the application server.
The vulnerability of the ILIAS learning management and support system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a malicious actor to execute arbitrary system commands on the application server remotely...
GO-2024-2462 Arbitrary command execution in github.com/0xJacky/Nginx-UI
Arbitrary command execution in github.com/0xJacky/Nginx-UI...
PT-2024-20053 · Notion · Notion Web Clipper
Name of the Vulnerable Software and Affected Versions: Notion Web Clipper version 1.0.37 Description: The Notion Web Clipper is susceptible to the Dirty NIB attack, where .nib files can be manipulated to execute arbitrary commands. Even if a .nib file is modified within an application, Gatekeeper...
TOTOLINK A3300R 安全漏洞
TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.557B20221024, which stems from the enable parameter of the setPortForwardRules method failing to correctly filter construct command specia...
FFmpeg Command Execution Vulnerability (CNVD-2024-28709)
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A command execution vulnerability exists in versions of Ffmpeg prior to n6.1, which can be exploited by an attacker to execute arbitrary commands on a system...
TOTOLINK A3300R 安全漏洞
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the port and enable parameters of the setRemoteCfg method faili...
TOTOLINK X2000R Command Injection Vulnerability
TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Easy Mesh feature and provides Gigabit internet connection and VPN service. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from the failure of sub449040 in /bin/boa to properly filter...
CVE-2023-38319
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...
TOTOLINK A3700R Command Injection Vulnerability
The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R is vulnerable to a command injection vulnerability that stems from the setOpModeCfg method failing to properly filter constructed command special characters, commands, and more. An attacker can...
openNDS Security Vulnerabilities
openNDS is openNDS open source a high-performance, small footprint portal system. A security vulnerability exists in openNDS prior to version 10.1.3 that stems from an inability to clean up a network interface name entry in a configuration file, allowing an attacker with direct or indirect access...
CVE-2023-38318
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...
CVE-2023-38318
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...
openNDS Security Vulnerabilities
openNDS is openNDS open source a high-performance, small footprint portal system. A security vulnerability exists in openNDS prior to version 10.1.3 that stems from an inability to clean up a stateful path script entry in a configuration file, which could allow an attacker with direct or indirect...
OpenNDS Security Vulnerabilities
openNDS is openNDS open source a high performance, small footprint portal system. A security vulnerability exists in OpenNDS prior to version 10.1.3 that stems from an inability to clean up a FAS key entry in a configuration file, allowing an attacker with direct or indirect access to the file to...
TOTOLINK X2000R 安全漏洞
TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Easy Mesh feature and provides Gigabit internet connection and VPN service. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from the failure of sub449040 in /bin/boa to properly filter...