Apache CouchDB command injection vulnerability

Apache CouchDB versions 3.5.2 and earlier contain a command injection vulnerability. This vulnerability stems from the lack of validation of runtime configuration values, potentially allowing CouchDB server administrators to execute arbitrary shell commands as users of the CouchDB operating syste...

Vulnerability related to improper handling of virtualenv output by Python Packaging Authority

A security vulnerability exists in Python Packaging Authority virtualenv versions prior to 21.14.4. This vulnerability stems from improper escaping of environment names in the bash activate script. When PROMPTSUBST is enabled in zsh, values such as environment directories, --prompt, or...

Chatchat-Space Langchain-Chatchat Authorization Issue Vulnerability

Chatchat-Space Langchain-Chatchat 0.3.1.3 and earlier versions have an authorization issue vulnerability. This vulnerability arises from the POST /tools/call API endpoint, which allows arbitrary registered tools to be called without authentication. This enables remote attackers to execute arbitra...

Vulnerability related to improper handling of virtualenv output by Python Packaging Authority

A security vulnerability exists in Python Packaging Authority virtualenv versions prior to 21.14.7. This vulnerability stems from incomplete escaping of environment variables in the bash activate script; backslashes can be unescaped, allowing commands to be executed in the user’s shell when names...

DrayTek Vigor2960: Input validation error vulnerability

The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a security vulnerability. This vulnerability stems from improper handling of the parameter newtable in the renametable function within the Rename Table Handler component. This could lead to remote command injection attacks...

Amazon KIRO Crew authorization issue vulnerability

Versions 0.4.0 through 0.7.1 of Amazon Kiro Crew contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks in WhatsApp group channels, potentially allowing members of an operator-managed WhatsApp group to send messages to the group, thereby controlli...

DrayTek Vigor2960 command injection vulnerability

The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a command injection vulnerability. This vulnerability stems from the sub182B0 function in the CGI Interface component/cgi-bin/mainfunction.cgi file, which processes parameters such as usefile, usescript, and option. This allows for OS comman...

Advantech Adam-3600 command injection vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a command injection vulnerability. This vulnerability stems from command injection, and it may allow authenticated attackers to execute root-level code on the system...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the batchupg function, which allows for OS command injections. Attackers can trigger this vulnerability through specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary...

WAVLINK WL-WN530BE1-A has a command injection vulnerability

The WAVLINK WL-WN530BE1-A M30BE1V251117 and earlier versions have a command injection vulnerability. This vulnerability stems from the ios binary sub23B54 function, which passes the uncleaned fileid parameter of type=del in the request/protocol.csp?opt=ovpnfile to popen. A remote unauthenticated...

TOTOLINK X2000R command injection vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from OS command injection in the boa formMapDelDevice macstr function. Attackers can exploit it by sending specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary code...

DrayTek Vigor2960: Input validation error vulnerability

The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a security vulnerability. This vulnerability stems from the operation of the settable function in the /cgi-bin/mainfunction.cgi file of the CGI Process component, which may lead to remote command injection...

TOTOLINK X2000R Command Injection Vulnerability

TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formWizard newPass function. Special HTTP requests may lead to arbitrary code execution...

ArmorX Global ArmorX Spam: Input validation error vulnerability

The ArmorX Global ArmorX versions prior to 8.15.2-3.282.133-1.90.061 have a vulnerability in input validation. This vulnerability stems from command injection; authenticated remote attackers can inject custom commands into specific parameters, thereby uploading malicious code to the server...

Python Packaging Authority virtualenv command injection vulnerability

The Python Packaging Authority’s virtualenv versions prior to 21.14.9 have a command injection vulnerability. This vulnerability arises from the prompt text provided by the caller potentially becoming executable syntax in the bash activation prompt, which can lead to command injection...

Vite launch-editor command injection vulnerability

Vite launch-editor has a command injection vulnerability. This vulnerability arises when an attacker can create file system entries in the working directory that start with a plus sign or minus sign. In such cases, launch-editor does not enforce the path as a positional file name. As a result, th...

Vite launch-editor command injection vulnerability

Versions of launch-editor prior to 2.14.2 have a command injection vulnerability. This vulnerability arises from launch-editor-middleware removing the row and column suffixes before the existsSync check when processing Windows file parameters controlled by attackers. As a result, parameters pass...

Python Packaging Authority virtualenv command injection vulnerability

The Python Packaging Authority’s virtualenv versions prior to 21.14.9 have a command injection vulnerability. This vulnerability stems from the fact that when generating POSIX console scripts, the interpreter path is passed to distlib ScriptMaker without proper referencing. When the path contains...

Coze-Dev and Coze-Studio: Configuration error vulnerabilities

Versions of coze-dev and coze-studio before 0.5.0 have a configuration error vulnerability. This vulnerability stems from insecure default configurations, allowing any registered user to execute commands in unshaded Python3 subprocedures by running workflow code nodes. Attackers can bypass the...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formUpload function. Authorized attackers can execute arbitrary code through specially crafted HTTP requests...