Lucene search
+L

7 matches found

Cvelist
Cvelist
added 2026/08/05 10:56 a.m.36 views

CVE-2026-71243 backmeup (npm) - OS Command Injection via Backup Option Values

The backmeup npm package assembles shell command strings by directly concatenating its option values name, source, destination, filter - e.g. cmd = "mkdir -p " + path.joininfo.destination, info.name + "; " - and executes the resulting string through a shell via ssh2-exec locally via childprocess,...

8.8CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 10:56 a.m.52 views

CVE-2026-71243

The CVE-2026-71243 entry concerns the backmeup npm package. It vulnerably assembles shell command strings by concatenating option values (name, source, destination, filter) into a single command (e.g., mkdir -p ...; ) and executes via a shell (ssh2-exec or local child_process), instead of using a...

8.8CVSS5.3AI score0.00288EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/05 10:56 a.m.11 views

CVE-2026-71243 backmeup (npm) - OS Command Injection via Backup Option Values

The backmeup npm package assembles shell command strings by directly concatenating its option values name, source, destination, filter - e.g. cmd = "mkdir -p " + path.joininfo.destination, info.name + "; " - and executes the resulting string through a shell via ssh2-exec locally via childprocess,...

8.8CVSS5.4AI score
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-0818

Malware in sbrugna...

3.7CVSS6AI score0.00413EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.9 views

WordPress Plugin InfiniteWP Client plugin for WordPress Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.9CVSS6.3AI score0.00642EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2018/04/24 7:40 p.m.17 views

Exploit Targets Nvidia Tegra-Based Nintendo Systems

UPDATE – Nvidia sought to downplay a vulnerability discovered in its Tegra X1-based systems in a recently published notice. “A researcher indicates that a person with physical access to older Tegra-based processors could connect to the device’s USB port, bypass the secure boot and execute...

1.6AI score
SaveExploits0References5
exploitpack
exploitpack
added 2009/04/20 12:0 a.m.13 views

eLitius 1.0 - Arbitrary Database Backup

eLitius 1.0 - Arbitrary Database Backup Powered By eLitius 1.0 Remote Database Backup Backup MySQL Database Choose Operation: Backup data only Save to your PC Greets: Dos-Dz TeaM SnAkEs-TeaM H4ckF0rU TeaM Team Sobh4n ALLAH Dork: Powered By eLitius 1.0 Cod3d By ThE g0bL!N...

0.1AI score
SaveExploits0
Rows per page
Query Builder