FreeCad 操作系统命令注入漏洞

FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports the Finite Element Method of building information modeling software. A security vulnerability exists in FreeCAD 0.19 that allows attackers to execute arbitrary commands via a crafte...

The vulnerability of microprogrammed software in NETGEAR’s network devices such as D7800, EX2700, WN3000RPv2, and WN3000RPv3 lies in the insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information or execute arbitrary commands.

The vulnerability of microprogrammed network devices such as NETGEAR D7800, EX2700, WN3000RPv2, and WN3000RPv3 lies in the insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information or execute arbitrary...

The vulnerability of NETGEAR’s Wi-Fi routers—CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850—is related to insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of NETGEAR CBR40, CBR750, EAX20, EAX80, LAX20, MR60, MR80, MS60, MS80, MK62, MK83, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, XR1000, XR300 are related to insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of Microprogrammed Wi-Fi router software from NETGEAR, including models CBR40, CBR750, EAX20, EAX80, LAX20, MR60, MR80, MS60, MS80, MK62, MK83, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2,...

SourceCodester Online Leave Management System SQL注入漏洞

SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...

Sql injection

SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password field...

CVE-2021-41659

CVE-2021-41659 describes a SQL injection in Sourcecodester Banking System v1 (by oretnom23) allowing arbitrary SQL via the username or password fields. The connected PT-2022-11456 entry confirms the affected software and vectors, stating the vulnerability can enable unauthorized access or data ma...

Simple Membership System SQL注入漏洞

Simple Membership System is a simple membership system for Razormist individual developers. A security vulnerability exists in Simple Membership System that originates from allowing arbitrary SQL commands to be executed via the username and password parameters...

Lexmark Command Injection Vulnerability

Lexmark is a series of printers in the U.S. A command injection vulnerability exists in Lexmark, which stems from the failure of a network system or product to properly filter special characters, commands, etc. during the execution of commands entered by a user into the construct. An attacker cou...

CVE-2021-40247

SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...

gegl: shell expansion via a crafted pathname

Due to the use of the system command in the Magick-Load op used by gegl an attacker is able to craft a command line path that is able to lead to the execution of arbitrary shell commands that impacts availability, confidentiality and integrity...

gegl: shell expansion via a crafted pathname

Due to the use of the system command in the Magick-Load op used by gegl an attacker is able to craft a command line path that is able to lead to the execution of arbitrary shell commands that impacts availability, confidentiality and integrity...

NUUO NVRmini2 Command Execution Vulnerability

Founded in 2004, NUUO is one of the world's leading suppliers of surveillance solutions. NUUO's VMS and NVR solutions provide a full spectrum of recording for IP and analog cameras. The NUUO NVRmini2 command execution vulnerability can be exploited by an attacker to execute arbitrary commands wit...

IBM FileNet Content Manager Command Injection Vulnerability

IBM FileNet Content Manager is a content management solution for the FileNet P8 platform from IBM of America. The solution combines document management with ready-to-use workflow tools to manage images, videos, Web content, compliance documents, etc. IBM FileNet Content Manager in versions 5.5.4,...

CVE-2021-38965

IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 212346...

CVE-2021-38965

IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 212346...

Design/Logic Flaw

IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 212346...

CVE-2021-38965

CVE-2021-38965 affects IBM FileNet Content Manager (embedded component in IBM Business Automation Workflow) with a command-injection vulnerability: remote authenticated attacker could execute arbitrary commands by sending a specially crafted request. Affected versions are 5.5.4, 5.5.6, and 5.5.7....

Caldera Command Injection Vulnerability

A command injection vulnerability exists in Caldera 2.8.1 and earlier, which stems from multiple startup "requirements" that execute commands when starting a server that commands can be changed via the REST API. An authenticated attacker could use this vulnerability to insert arbitrary commands a...

Mozilla Firefox Security Advisories (MFSA2021-55, MFSA2022-03) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...