1885 matches found
Cisco Identity Services Engine Command Injection Vulnerability (CNVD-2023-93336)
Cisco Identity Services Engine is an environment-aware platform from Cisco USA. A security vulnerability exists in Cisco Identity Services Engine, which can be exploited by a local attacker to submit a special request to gain root privileges and execute arbitrary code...
CVE-2023-26848
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules...
Cisco Small Business 命令注入漏洞
Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325, which stems from insufficient validation of inputs to the web-based management interface...
Command Injection
discordrb is vulnerable to Command Injection. The vulnerability exists due to improper clients sanitization in the encoder.rb, which allows an attacker to execute arbitrary commands...
D-Link Go-RT-AC750 命令注入漏洞
The D-Link GO-RT-AC750 is a wireless dual-band simple router from China-based AUO D-Link. A security vulnerability exists in the D-Link Go-RT-AC750 revAv101b03 version, which was discovered to contain a command injection vulnerability via the service parameter of soapcgi.main...
CVE-2023-27231
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg...
CVE-2023-27229
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg...
CVE-2022-28496
TOTOLink outdoor CPE CP900 V6.3c.566B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
Critical: maven-shared-utils
Issue Overview: org.apache.maven.shared:maven-shared-utils is a functional replacement for plexus-utils in Maven. Affected versions of this package are vulnerable to Command Injection. The Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...
PT-2023-22608 · Unknown · Magnusbilling
Name of the Vulnerable Software and Affected Versions: MagnusSolution magnusbilling versions 6.x through 7.x Description: The issue allows remote attackers to run arbitrary commands via unauthenticated HTTP requests. This is a Command Injection vulnerability. There are reports of real-world...
CVE-2023-27240
Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip...
PT-2023-2025
Name of the Vulnerable Software and Affected Versions TP-Link Archer AX21 versions prior to 1.1.4 Build 20230219 Description An unauthenticated attacker can execute arbitrary commands with root privileges on the web management interface via a command injection issue. The flaw exists because the...
Debian: Security Advisory (DLA-237-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-0093
Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit this issue, an attacker would need t...
SUSE-SU-2023:0597-1 Security update for emacs
This update for emacs fixes the following issues: - CVE-2022-48337: Fixed etags local command injection vulnerability bsc1208515. - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability bsc1208512...
MGASA-2023-0081 Updated emacs packages fix security vulnerability
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u " command suggested in the eta...
SUSE-SU-2023:0582-1 Security update for xterm
This update for xterm fixes the following issues: - CVE-2022-45063: Fixed command injection in ESC 50 fontoperation by disabling the change font functionality bsc1205305...
PT-2023-1681 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to the lack of input sanitization in the command line interface of ArubaOS, allowing for authenticated command injection. This could enable a remote attacker to execute...
Huawei BiSheng-WNM 命令注入漏洞
Huawei BiSheng-WNM is a Huawei printer from Huawei China. A security vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325. An attacker can exploit the vulnerability to remotely execute code...
