15 matches found
EUVD-2022-0430
Malicious code in bioql PyPI...
CVE-2022-26830
DiskUsage.exe Remote Code Execution Vulnerability...
PT-2022-2821 · Microsoft · Diskusage.Exe +1
Name of the Vulnerable Software and Affected Versions: DiskUsage.exe affected versions not specified Description: The issue exists due to insufficient input validation in the DiskUsage.exe file of the Windows operating system. This allows a remote attacker to execute arbitrary code...
Microsoft Windows SMB Server 输入验证错误漏洞
Microsoft Windows DiskUsage.exe is a remote code execution vulnerability in Microsoft Windows, an operating system used by personal devices. The vulnerability stems from the failure of a network system or product to properly filter special elements in code segments constructed from external input...
GHSA-3269-X4PW-VFFG OS Command Injection in diskusage-ng
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
OS Command Injection in diskusage-ng
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
OS Command Injection
diskusage-ng is vulnerable to OS Command Injection. The vulnerability exists as the value of path is not sanitized, and is used in exec...
diskusage-ng Command Injection Vulnerability
diskusage-ng is a package that can obtain disk usage information. A command injection vulnerability exists in diskusage-ng version 0.2.4 and earlier. The vulnerability can be exploited to execute arbitrary commands using the path parameter...
CVE-2020-7631
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
CVE-2020-7631
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
Design/Logic Flaw
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
CVE-2020-7631
Diskusage-ng (npm package) vulnerability CVE-2020-7631: versions up to 0.2.4 are vulnerable to Command Injection via the path argument due to unsanitized input. Impact: arbitrary commands may be executed with the affected code path. Root cause: user-controlled path parameter not sanitized before ...
CVE-2020-7631
diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...
Command Injection
Overview diskusage-ng is a package that get disk usage info in pure JavaScript and without any dependencies. Affected versions of this package are vulnerable to Command Injection. The argument path can be controlled by users without any sanitization. PoC var root = require"diskusage-ng"; root...
CVE-2003-1247
Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via 1 a long URL content type in CGI::readFile, 2 a long path in diskusage, and 3 a long fname in flist...