Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-6402

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01367EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/07/01 12:1 a.m.17 views

OS Command Injection in awesome spawn

Awesome spawn prior to version 1.2.0 contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...

9.8CVSS9.8AI score0.01367EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/07/01 12:1 a.m.17 views

GHSA-QPQW-MC85-QVM9 OS Command Injection in awesome spawn

Awesome spawn prior to version 1.2.0 contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...

9.8CVSS10AI score0.01367EPSS
Exploits0References4
NVD
NVD
added 2022/06/30 9:15 p.m.8 views

CVE-2014-0156

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...

9.8CVSS0.01367EPSS
Exploits0References2
Prion
Prion
added 2022/06/30 9:15 p.m.15 views

Command injection

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command...

7.5CVSS8.4AI score0.01367EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/06/30 8:36 p.m.67 views

CVE-2014-0156

CVE-2014-0156 corresponds to an OS command injection in the Ruby gem awesome_spawn (ManageIQ). The vulnerability allows an attacker to execute arbitrary commands when untrusted input is passed as command arguments to AwesomeSpawn.run, via the underlying Kernel.spawn usage. The issue affects versi...

9.8CVSS9.9AI score0.01367EPSS
Exploits0References2Affected Software1
RubySec
RubySec
added 2014/03/28 12:0 a.m.16 views

OS command injection flaw in awesome_spawn

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments, e.g. AwesomeSpawn.run'ls',:params = '-l' = ";touch haxored". If untrusted input was included in command arguments, attacker could use this flaw to execute...

9.8CVSS3.6AI score0.01367EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder