SQLite report about CVE-2022-46908

This is a bug in the --safe command-line option of the command-line shell program that is available for accessing SQLite database files. The bug does not exist in the SQLite library. Nor is it an issue for the CLI as long as the user does not depend on the --safe option. It is not serious. It is...

Cross site scripting

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

Garrett Metal Detectors Path Traversal Vulnerability (CNVD-2022-01317)

Garrett Metal Detectors is a walk-in metal detector from Garrett U.S. Garrett Metal Detectors has a path traversal vulnerability that can be exploited by attackers to delete arbitrary files in the del.CNT|.log file deletion command with specially crafted command line parameters...

Garrett Metal Detectors Path Traversal Vulnerability (CNVD-2022-01315)

Garrett Metal Detectors is a walk-in metal detector from Garrett U.S.A. Garrett Metal Detectors is vulnerable to a path traversal vulnerability that can be exploited by attackers to cause local file inclusion with specially crafted command line arguments...

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to compromise the vulnerable system.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the getvar_i function in the command-line utilities of BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the getvari function in the command-line utilities of BusyBox relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Microsoft Windows Explorer Preview Pane Security Bypass Vulnerability

Previewing a WMA/WMV media format on Windows Explorer through its Preview Pane causes embedded URLs to be automatically opened in the default browser without displaying any prompt. Exploit Title: Windows Explorer Preview Pane WMV/WMA media Automatic URI Opening Vulnerability Exploit Author: Eduar...

ROS-20211223-07

BusyBox command line utility suite vulnerability is related to reading beyond memory boundaries. Exploitation The vulnerability could allow an attacker acting remotely to cause a read outside bounds error and read the contents of memory on the system or perform a denial of service DoS attack. A...

DEBIAN-CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

CVE-2021-45463

loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...

CVE-2021-21909

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...

CVE-2021-21909

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...

CVE-2021-21909

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...

Directory traversal

Specially-crafted command line arguments can lead to arbitrary file deletion. The handledelete function does not attempt to sanitize or otherwise validate the contents of the file parameter passed to the function as argv1, allowing an authenticated attacker to supply directory traversal primitive...

CVE-2021-21909

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...

CVE-2021-21909

CVE-2021-21909 affects Garrett Metal Detectors iC Module CMA Version 5.0. Affected component is the CMA CLI (del/delenv) exposed over TCP (port 6877) with an authenticated CLI. Root cause is improper validation/sanitization of the user-supplied file argument in handle_delete/delEnv, allowing dire...

CVE-2021-21908

Specially-crafted command line arguments can lead to arbitrary file deletion. The handledelete function does not attempt to sanitize or otherwise validate the contents of the file parameter passed to the function as argv1, allowing an authenticated attacker to supply directory traversal primitive...

CVE-2021-21908

Garrett Metal Detectors iC Module CMA v5.0 exposes an authenticated CLI over TCP (port 6877) with del and delenv commands. TALOS details CVE-2021-21908: handle_delete does not validate argv[1], allowing directory traversal to delete files (e.g., via delenv or via non-.cnt/.log paths). The del fun...