Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServer

SummaryThe Fugue framework implements an RPC server system for distributed computing operations. In the corefunctionality of the RPC server implementation, Ifound thatthedecodefunction infugue/rpc/flask.pydirectly usescloudpickle.loadsto deserialize datawithout any sanitization. This creates a...

mp() function Code Execution

The vulnerability of the mp function in the /goform/mp microprogramming system for Belkin F9K1015 routers is related to the lack of measures taken to clean data at the control level when processing the command parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code b...