Lucene search
+L

1020 matches found

RedhatCVE
RedhatCVE
added 2025/09/29 10:56 a.m.23 views

CVE-2025-11073

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

5.8CVSS6.9AI score0.0195EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/27 6:15 p.m.15 views

CVE-2025-11073

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

5.8CVSS0.0195EPSS
SaveExploits0References5
CVE
CVE
added 2025/09/27 6:02 p.m.39 views

CVE-2025-11073

CVE-2025-11073 affects Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019: the HTTP POST Request Handler in /cgi-bin/luci/api/cmd has an argument url that can be manipulated to trigger command injection. The vulnerability is remote and the exploit is public. Connected records consistently ...

5.8CVSS6.8AI score0.0195EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/09/27 6:02 p.m.8 views

CVE-2025-11073 Keyfactor RG-EW5100BE HTTP POST Request cmd command injection

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

5.8CVSS6.8AI score0.0195EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.7 views

JSC R7 R7-Office Document Server 路径遍历漏洞

JSC R7 R7-Office Document Server is an office software from the Russian company JSC R7. A path traversal vulnerability exists in JSC R7 R7-Office Document Server 20250820 and earlier versions, which stems from incorrect manipulation of the parameter cmd in the file /downloadas/, which could lead ...

6.5CVSS6.3AI score0.0042EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/15 3:15 p.m.10 views

CVE-2022-50294

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in lbsinitadapter When kfifoalloc failed in lbsinitadapter, cmd buffer is not released. Add free memory to processing error path...

5.5CVSS0.00156EPSS
SaveExploits0References8
OSV
OSV
added 2025/09/15 2:45 p.m.11 views

CVE-2022-50294 wifi: libertas: fix memory leak in lbs_init_adapter()

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in lbsinitadapter When kfifoalloc failed in lbsinitadapter, cmd buffer is not released. Add free memory to processing error path...

6.4AI score
SaveExploits0References11
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to free the cmd buffer when kfifoalloc fails in the lbsinitadapter function, which could lead to...

5.5CVSS6AI score0.00156EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.21 views

PT-2025-37596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the lbs init adapter function within the Libertas wireless driver. Specifically, when the kfifo alloc function failed, the command buffer was not released...

7.8CVSS6.8AI score0.21521EPSS
SaveExploits4References988
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.6 views

Malicious code in ds-cmd-line-2e-zh (npm)

The package ds-cmd-line-2e-zh was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.5 views

MAL-2025-44077 Malicious code in ds-cmd-line-2e-zh (npm)

The package ds-cmd-line-2e-zh was found to contain malicious code...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 8:31 a.m.10 views

Command 'go get' may unexpectedly fallback to insecure git in cmd/go

...

7.5CVSS9.3AI score0.01137EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/09/04 12:28 a.m.10 views

CVE-2025-50755

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsyscmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

6.5CVSS8.3AI score0.01084EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/09/02 12:00 a.m.13 views

EUVD-2025-26405

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsyscmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

6.5CVSS7.6AI score0.01084EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-2361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component We...

5.3CVSS3.3AI score0.00507EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-15767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmdload function in frontend/cmd.cc via a crafted chess position in an EPD file. CVE-2019-1576...

7.8CVSS7.7AI score0.01468EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-27794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free issue was discovered in radare2 in cmdinfo.c:cmdinfo. Successful exploitation could lead to modification of unexpected memory locations and...

9.1CVSS7.7AI score0.0105EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-7342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable...

6.1CVSS7AI score0.00989EPSS
SaveExploits1References2
NVD
NVD
added 2025/08/24 12:15 p.m.11 views

CVE-2025-9387

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

9.8CVSS0.09314EPSS
SaveExploits1References5
OSV
OSV
added 2025/08/22 4:15 p.m.11 views

CVE-2025-55602

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits1References2
Rows per page
Query Builder