1891 matches found
google-cloudstorage-commands 命令注入漏洞
google-cloudstorage-commands is a set of commands for node and gcloud interactions from the individual developers at sam. A security vulnerability exists in google-cloudstorage-commands, which stems from the vulnerability of this package to command injection attacks...
Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) Remote Root Exploit
Schneider Electric SpaceLogic C-Bus Home Controller 5200WHC2 versions 1.31.460 and below suffer from an authenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands as the root user via the name GET parameter in delsnap.pl Perl/CGI script...
Spryker Commerce OS 操作系统命令注入漏洞
Spryker Commerce OS is a B2B, B2C and Marketplace solution from Spryker Germany. A security vulnerability exists in Spryker Commerce OS version 1.4.2 that originates from allowing an attacker to perform remote command execution...
SUSE-SU-2022:2357-1 Security update for python3
This update for python3 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module bsc1198511...
EUVD-2022-37548
Tenda AX1803 v1.0.0.12890 was discovered to contain a command injection vulnerability via the function WanParameterSetting...
EUVD-2022-37547
Tenda AX1803 v1.0.0.12890 was discovered to contain a command injection vulnerability via the function setipv6status...
FESTO Hardware Controller, Hardware Servo Press Kit
SUMMARY The Festo controller CECC-X-M1 product family in multiple versions are affected by a preauthentication command injection vulnerability. Update A, 2022-07-05 Remediation has been updated. Fixed firmwares are now available. 2. IMPACT Any person who is able to gain access to the webserver...
CVE-2022-33329
Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /ajax/setsystime/...
CVE-2022-33327
Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The...
FreeBSD : OpenSSL -- Command injection vulnerability (4eeb93bf-f204-11ec-8fbd-d4c9ef517024)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4eeb93bf-f204-11ec-8fbd-d4c9ef517024 advisory. - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances...
EulerOS 2.0 SP8 : compat-openssl10 (EulerOS-SA-2022-1924)
According to the versions of the compat-openssl10 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some...
CVE-2022-30425
Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerability is exploited via a crafted POST request...
CVE-2022-29639
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function ucicloudupdateconfig...
Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-64231)
Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager has a command injection vulnerability, the vulnerability stems from the user input structure to execute the command process, the...
CVE-2022-26075
An OS command injection vulnerability exists in the console infactorywlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability...
CVE-2022-26042
An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...
CVE-2022-29303
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...
CVE-2022-28905
TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...
