EUVD-2024-36029

Malicious code in bioql PyPI...

CVE-2024-36360

OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...

CVE-2024-36360

OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...

CVE-2024-36360

The awkblog blog site (versions v0.0.1 and earlier) is vulnerable to an OS command injection (CWE-78) flaw. A remote, unauthenticated attacker can execute arbitrary OS commands with the privileges of the affected product by sending a specially crafted HTTP request . This vulnerability allows for ...

CVE-2024-36360

OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...

PT-2024-26961 · Awkblog · Awkblog

Name of the Vulnerable Software and Affected Versions: awkblog versions 0.0.1 and earlier Description: A remote unauthenticated attacker can execute an arbitrary OS command with the privileges of the affected product by sending a specially crafted HTTP request. This issue allows for the execution...

CVE-2024-36360: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability exists in awkblog v0.0.1 commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552 and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the...

awkblog vulnerable to OS command injection

Overview awkblog provided by Keisuke Nakayama contains an OS command injection vulnerability CWE-78. Keigo YAMAZAKI of LAC Co., Ltd. / Nuligen Security Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

JVN#80506242: awkblog vulnerable to OS command injection

awkblog provided by Keisuke Nakayama contains an OS command injection vulnerability CWE-78. Impact If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the machine running the product...

awkblog Security Vulnerabilities

awkblog is a blog site. A security vulnerability exists in awkblog v0.0.1 and earlier versions that stems from the presence of an operating system command injection vulnerability...