52 matches found
GitPython Arbitrary Command Execution File Overwrite
The vulnerabilities of the functions Repo.archive, git.lsremote, Repo.itercommits, and Repo.blame in the GitPython library for interacting with Git repositories are related to the lack of data cleaning at the control level. Exploiting these vulnerabilities could allow an attacker to execute...
D-Link DNS-120 Arbitrary Command Execution
The vulnerability of the /cgi-bin/remotebackup.cgi script in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,...
ROS-20260623-73-0012
Vulnerability in Python 3.9 related to the lack of measures taken to clean data at the control level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0015
Vulnerability in Python 3.12 related to the lack of measures taken to clean data at the control level. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260623-73-0011
The vulnerability in Python3 is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Microsoft Visual Studio Code Editor Code Execution
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
TOTOLink A7100RU setPasswordCfg Command Execution
The vulnerability of the setPasswordCfg function in the microprogramming software for TOTOLink A7100RU lies in the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
EUVD-2026-31770
Missing Authorization vulnerability in edwardplainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout: from n/a through 2.161...
Python imaplib Code Execution
The vulnerability of the imaplib module in the Python interpreter is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
poplib Code Execution
The vulnerability of the poplib module, a programming language interpreter for Python, is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
ESAfenet DSM Arbitrary Command Execution
The vulnerability of the ESAFENET DSM monitoring and network security management software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow attackers to execute arbitrary commands...
Microsoft Visual Studio Code Source Editor Data Cleaning
The vulnerability of Microsoft Visual Studio Code’s editor is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...
Notepad Code Execution
The vulnerability of the Windows operating system’s text editor, Notepad, is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Ruckus Virtual SmartZone Controllers Code Execution
The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
TRENDnet TEW-800MB Sub F934 Function Command Execution
The vulnerability of the subF934 function in the TRENDnet TEW-800MB Wi-Fi adapter software relates to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted HTTP requests...
Wavlink NU516U1 Router Sub_403198 Function Arbitrary Command Execution
The vulnerability of the sub403198 function in the /cgi-bin/wireless.cgi script of the Wavlink NU516U1 router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the mac5g parameter. Exploiting this vulnerability could allow a remo...
Avtech IP cameras Command Execution
The vulnerability of the web interface of Avtech’s microprogramming software-based IP cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
D-Link DIR-882 Sub Process Command Execution
The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
D-Link DIR-882 Wireless Router Command Execution
The vulnerability of sub4455BC in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
Netty SMTP Execution
The vulnerability of the Netty network programming framework is related to the lack of measures taken to sanitize data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary SMTP commands...