EUVD-2024-36029

Malicious code in bioql PyPI...

CVE-2024-36360

OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...

CVE-2024-36360

CVE-2024-36360 affects awkblog v0.0.1 and earlier. A remote unauthenticated attacker can cause arbitrary OS command execution by sending a crafted HTTP request, with the impact described as high for confidentiality, integrity, and availability. The root cause is an OS command injection vulnerabil...

CVE-2024-36360

OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...

CVE-2024-36360

OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...

PT-2024-26961 · Awkblog · Awkblog

Name of the Vulnerable Software and Affected Versions: awkblog versions 0.0.1 and earlier Description: A remote unauthenticated attacker can execute an arbitrary OS command with the privileges of the affected product by sending a specially crafted HTTP request. This issue allows for the execution...

awkblog vulnerable to OS command injection

Overview awkblog provided by Keisuke Nakayama contains an OS command injection vulnerability CWE-78. Keigo YAMAZAKI of LAC Co., Ltd. / Nuligen Security Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

JVN#80506242: awkblog vulnerable to OS command injection

awkblog provided by Keisuke Nakayama contains an OS command injection vulnerability CWE-78. Impact If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the machine running the product...

awkblog Security Vulnerabilities

awkblog is a blog site. A security vulnerability exists in awkblog v0.0.1 and earlier versions that stems from the presence of an operating system command injection vulnerability...