CVE-2011-2195

WebSVN 2.3.2 contains an unauthenticated OS command injection when allowDownload is enabled in config.php. An attacker can call the dl.php script with a well-formed path argument to execute arbitrary commands on the underlying OS. The issue is triggered without prior authentication and is tied to...

PT-2021-8348

Name of the Vulnerable Software and Affected Versions WebSVN version 2.3.2 Description A flaw was found in WebSVN. Without prior authentication, if the allowDownload option is enabled in config.php, an attacker can invoke the "dl.php" script and pass a well-formed path argument to execute arbitra...

VulnCheck KEV: CVE-2021-26605

An improper input validation vulnerability in the service of ezPDFReader allows attacker to execute arbitrary command. This issue occurred when the ezPDF launcher received and executed crafted input values through JSON-RPC communication...

PT-2021-5357

Name of the Vulnerable Software and Affected Versions vim affected versions not specified Description The issue is related to a heap-based buffer overflow in the vim editor, which can be exploited by a remote attacker to execute arbitrary commands. This can be achieved by using the -s parameter i...

GHSA-VW27-FWJF-5QXM Arbitrary command execution on Windows via qutebrowserurl: URL handler

Impact Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers it as a handler for certain URL schemes. With some applications such as Outlook Desktop, opening a specially crafted URL can lead to argument injection, allowing execution of qutebrowser commands, which in tu...

Arbitrary Command Execution

qutebrowser is vulnerable to arbitrary command execution. An attacker is able to execute commands such as :spawn or :debug-pyeval on the host OS via a specially crafted URL leading to argument injection. The vulnerability exists on windows installations where qutebrowser is registered as a URL...

CVE-2021-41146 Arbitrary command execution on Windows in qutebrowser

qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a qutebrowserurl: URL handler. With certain applications, opening a specially crafted qutebrowserurl:... URL can lead to execution of...

‘Lone Wolf’ APT Uses Commodity RATs

An APT described as a “lone wolf” is exploiting a decades-old Microsoft Office flaw to deliver a barrage of commodity RATs to organizations in India and Afghanistan, researchers have found. Attackers use political and government-themed malicious domains as lures in the campaign, which targets...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-10721)

Aruba ClearPass Policy Manager is an application of Aruba, Inc. that provides wireless network security access management system Aruba ClearPass Policy Manager has a security vulnerability that stems from a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager version...

PT-2021-15218

Name of the Vulnerable Software and Affected Versions ConneXium Network Manager Software All Versions Description A vulnerability exists due to improper privilege management, which could lead to arbitrary command execution when the software is configured with specially crafted event actions...

CVE-2021-40995

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

CVE-2021-40998

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

CVE-2021-40998

The CVE-2021-40998 entry corresponds to a remote arbitrary command execution in Aruba ClearPass Policy Manager. Affected versions are ClearPass Policy Manager 6.10.x prior to 6.10.2, 6.9.x prior to 6.9.7-HF1, and 6.8.x prior to 6.8.9-HF1. The issue is described across multiple sources as a remote...

CVE-2021-37739

CVE-2021-37739 affects Aruba ClearPass Policy Manager (various versions: 6.8.x before 6.8.9-HF1, 6.9.x before 6.9.7-HF1, 6.10.x before 6.10.2). The vulnerability is a remote arbitrary command execution issue in ClearPass Policy Manager. Producers/connected sources consistently describe a remote c...

PT-2021-23033

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.x prior to 6.10.2 Aruba ClearPass Policy Manager versions 6.9.x prior to 6.9.7-HF1 Aruba ClearPass Policy Manager versions 6.8.x prior to 6.8.9-HF1 Description A remote arbitrary command execution...

PT-2021-23045

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.x prior to 6.10.2 Aruba ClearPass Policy Manager versions 6.9.x prior to 6.9.7-HF1 Aruba ClearPass Policy Manager versions 6.8.x prior to 6.8.9-HF1 Description A remote arbitrary command execution...

PT-2021-23042

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.x prior to 6.10.2 Aruba ClearPass Policy Manager versions 6.9.x prior to 6.9.7-HF1 Aruba ClearPass Policy Manager versions 6.8.x prior to 6.8.9-HF1 Description A remote arbitrary command execution...

PT-2021-23046

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.x prior to 6.10.2 Aruba ClearPass Policy Manager versions 6.9.x prior to 6.9.7-HF1 Aruba ClearPass Policy Manager versions 6.8.x prior to 6.8.9-HF1 Description A remote arbitrary command execution...

PT-2021-23034

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.x prior to 6.10.2 Aruba ClearPass Policy Manager versions 6.9.x prior to 6.9.7-HF1 Aruba ClearPass Policy Manager versions 6.8.x prior to 6.8.9-HF1 Description A remote arbitrary command execution...