Design/Logic Flaw

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

CVE-2023-40590 Untrusted search path on Windows systems leading to arbitrary code execution

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

CVE-2023-40590

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

CVE-2023-38029

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service...

Command injection

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service...

Input validation

IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368...

CVE-2023-22877 IBM InfoSphere Information Server CSV injection

IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368...

CVE-2023-22877

CVE-2023-22877 affects IBM InfoSphere Information Server 11.7. The root cause is CSV injection arising from improper validation of CSV contents during processing, enabling a remote attacker to execute arbitrary commands on the system. Documentation cites CVSS metrics with high impact (C/H, I/H, A...

The vulnerability of the web-based administration interface for microprogrammed software-based industrial routers NB800, NG800, NB1601, NB1800, NB1810, NB2800, NB2810, NB3701, and NB3800 allows a hacker to execute arbitrary commands with elevated privileges.

The vulnerability of the web-based administration interface for microprogrammed software-based industrial routers such as NB800, NG800, NB1601, NB1800, NB1810, NB2800, NB2810, NB3701, and NB3800 exists due to the lack of measures taken to neutralize the special elements used in the operating syst...

SpotCam Sense 命令注入漏洞

SpotCam Sense is a webcam from China's SpotCam company. SpotCam Sense v2.2044 firmware version exists command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability to arbitrary system commands t...

SpotCam Sense 操作系统命令注入漏洞

SpotCam Sense is a camera from China's SightBoob.com SpotCam company. SpotCam FHD 2 1.0036 firmware version exists operating system command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability ...

Untrusted Search Path

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the git command, if a user runs GitPython from a repo has a git.exe or git...

Debian: Security Advisory (DSA-5332-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QQ Music Command Execution Vulnerability

QQ Music is the official music playback software from Tencent. A command execution vulnerability exists in QQ Music, which can be exploited by an attacker to execute arbitrary commands...

CVE-2022-43907 IBM Security Guardium command execution

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901...

SUSE CVE-2020-21583

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...

CVE-2023-25649

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...

Command injection

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...

CVE-2023-25649 OS Command Injection Vulnerability in a Mobile Internet Product of ZTE

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SETDEVICELED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands...

PT-2023-24005 · Unknown · E-Excellence U-Office Force

Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The file uploading function in e-Excellence U-Office Force does not restrict the upload of files with dangerous types. An unauthenticated remote attacker can exploit thi...