52 matches found
The vulnerabilities of the functions Repo.archive(), git.ls_remote(), Repo.iter_commits(), and Repo.blame() in the Python library for interacting with Git repositories, GitPython, allow attackers to execute arbitrary commands and overwrite arbitrary files.
The vulnerabilities of the functions Repo.archive, git.lsremote, Repo.itercommits, and Repo.blame in the GitPython library for interacting with Git repositories are related to the lack of data cleaning at the control level. Exploiting these vulnerabilities could allow an attacker to execute...
The vulnerability in the script /cgi-bin/remote_backup.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04, allows a hacker to execute arbitrary commands.
The vulnerability of the /cgi-bin/remotebackup.cgi script in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,...
ROS-20260623-73-0011
The vulnerability in Python3 is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0015
Vulnerability in Python 3.12 related to the lack of measures taken to clean data at the control level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0012
Vulnerability in Python 3.9 related to the lack of measures taken to clean data at the control level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of Microsoft Visual Studio Code’s editor, related to the lack of data cleaning at the control level, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the setPasswordCfg() function in the microprogramming software for TOTOLink A7100RU allows a hacker to execute arbitrary commands.
The vulnerability of the setPasswordCfg function in the microprogramming software for TOTOLink A7100RU lies in the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
EUVD-2026-31770
Missing Authorization vulnerability in edwardplainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout: from n/a through 2.161...
The vulnerability of the poplib module in the Python programming language allows a hacker to execute arbitrary code.
The vulnerability of the poplib module, a programming language interpreter for Python, is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the imaplib module in the Python interpreter allows a hacker to execute arbitrary code.
The vulnerability of the imaplib module in the Python interpreter is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ESAFENET DSM software for monitoring and managing network security, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of the ESAFENET DSM monitoring and network security management software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
The vulnerability of Microsoft Visual Studio Code’s source editor, related to the lack of data cleaning at the control level, allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...
The vulnerability of the Notepad text editor on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows operating system’s text editor, Notepad, is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Ruckus Virtual SmartZone’s microprogrammed software controllers, related to the lack of measures taken to clean data at the control level, allows a intruder to execute arbitrary code.
The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the sub_F934() function in the Wi-Fi adapter software developed by TRENDnet TEW-800MB allows a hacker to execute arbitrary commands.
The vulnerability of the subF934 function in the TRENDnet TEW-800MB Wi-Fi adapter software relates to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted HTTP requests...
The vulnerability of the sub_403198() function in the /cgi-bin/wireless.cgi script of the Wavlink NU516U1 router’s microprogramming system, allowing a hacker to execute arbitrary commands.
The vulnerability of the sub403198 function in the /cgi-bin/wireless.cgi script of the Wavlink NU516U1 router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the mac5g parameter. Exploiting this vulnerability could allow a remo...
The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.
The vulnerability of the web interface of Avtech’s microprogramming software-based IP cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the sub_4438A4() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.
The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of function sub_4455BC in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.
The vulnerability of sub4455BC in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
The vulnerability of the Netty network programming framework lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary SMTP commands.
The vulnerability of the Netty network programming framework is related to the lack of measures taken to sanitize data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary SMTP commands...