git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree

A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This allows the owner of the repository to cause arbitrary commands to be executed by other...

HPESBNW04479 rev.2 - HPE Aruba Access Points, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Denial of Service DoS, Execution of Arbitrary Commands, Unauthorized Arbitrary Command Execution, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points - See vulnerability summary...

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

CVE-2023-22788 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

Tenda AC18 setUsbUnload Function Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from the existence of a command injection vulnerability via the deviceName...

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

EulerOS 2.0 SP10 : emacs (EulerOS-SA-2023-1819)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or...

TOTOLINK A7100RU command injection vulnerability (CNVD-2026-32276)

TOTOLINK A7100RU is a dual-band Gigabit wireless router introduced by TOTOLINK. It supports 2.4GHz/5GHz frequency bands and a Gigabit network port. It is primarily used for home or small office network connectivity. The TOTOLINK A7100RU has a command injection vulnerability, allowing attackers to...

CVE-2023-30013: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter...

CVE-2023-30013

TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter...

Tenda AC18 command injection vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability, which stems from the existence of a command injection vulnerability via the deviceName...

TOTOLINK X5000R: Operating System Command Injection Vulnerability

TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X5000R V9.1.0u.6118B20201102 and V9.1.0u.6369B20230113 versions, which stems from the presence of a command injection in the setting/setTracerouteCfg, which can be exploited by an...

IBM AIX errlog() Command Execution

The vulnerability of the errlog system call function in the runtime services library of the IBM AIX operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows an attacker to execute...

invscout IBM AIX Command Execution

The vulnerability of the invscout command in the IBM AIX operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

CVE-2023-2491

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise...

CVE-2022-30759

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

Command injection

UNSUPPORTED WHEN ASSIGNED The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...

PYSEC-2023-72

UNSUPPORTED WHEN ASSIGNED The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...