Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-0430

Malicious code in bioql PyPI...

9.8CVSS9.5AI score0.01227EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/04/15 7:15 p.m.1 views

CVE-2022-26830

DiskUsage.exe Remote Code Execution Vulnerability...

7.5CVSS7.2AI score0.05155EPSS
Exploits0References3Affected Software2
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.2 views

PT-2022-2821 · Microsoft · Diskusage.Exe +1

Name of the Vulnerable Software and Affected Versions: DiskUsage.exe affected versions not specified Description: The issue exists due to insufficient input validation in the DiskUsage.exe file of the Windows operating system. This allows a remote attacker to execute arbitrary code...

7.6CVSS7.7AI score0.05155EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.1 views

Microsoft Windows SMB Server 输入验证错误漏洞

Microsoft Windows DiskUsage.exe is a remote code execution vulnerability in Microsoft Windows, an operating system used by personal devices. The vulnerability stems from the failure of a network system or product to properly filter special elements in code segments constructed from external input...

7.5CVSS8.8AI score0.05155EPSS
Exploits0References6
OSV
OSV
added 2022/01/07 12:21 a.m.12 views

GHSA-3269-X4PW-VFFG OS Command Injection in diskusage-ng

diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...

9.8CVSS9.7AI score0.01227EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/01/07 12:21 a.m.52 views

OS Command Injection in diskusage-ng

diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...

9.8CVSS9.3AI score0.01227EPSS
Exploits1References4Affected Software1
Veracode
Veracode
added 2020/04/07 6:34 a.m.14 views

OS Command Injection

diskusage-ng is vulnerable to OS Command Injection. The vulnerability exists as the value of path is not sanitized, and is used in exec...

9.8CVSS2.9AI score0.01227EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2020/04/07 12:0 a.m.7 views

diskusage-ng Command Injection Vulnerability

diskusage-ng is a package that can obtain disk usage information. A command injection vulnerability exists in diskusage-ng version 0.2.4 and earlier. The vulnerability can be exploited to execute arbitrary commands using the path parameter...

9.8CVSS8AI score0.01227EPSS
Exploits1References1
OSV
OSV
added 2020/04/06 1:15 p.m.0 views

CVE-2020-7631

diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...

9.8CVSS7.5AI score
Exploits0References2
NVD
NVD
added 2020/04/06 1:15 p.m.7 views

CVE-2020-7631

diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...

9.8CVSS9.8AI score0.01227EPSS
Exploits1References2
Prion
Prion
added 2020/04/06 1:15 p.m.11 views

Design/Logic Flaw

diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...

7.5CVSS9.7AI score0.01227EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2020/04/06 12:18 p.m.48 views

CVE-2020-7631

Diskusage-ng (npm package) vulnerability CVE-2020-7631: versions up to 0.2.4 are vulnerable to Command Injection via the path argument due to unsanitized input. Impact: arbitrary commands may be executed with the affected code path. Root cause: user-controlled path parameter not sanitized before ...

9.8CVSS9.7AI score0.01227EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/04/06 12:18 p.m.10 views

CVE-2020-7631

diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument...

9.8AI score0.01227EPSS
Exploits1References2
Snyk
Snyk
added 2020/04/05 12:0 a.m.1 views

Command Injection

Overview diskusage-ng is a package that get disk usage info in pure JavaScript and without any dependencies. Affected versions of this package are vulnerable to Command Injection. The argument path can be controlled by users without any sanitization. PoC var root = require"diskusage-ng"; root...

9.8CVSS5.6AI score0.01227EPSS
Exploits1References2
Cvelist
Cvelist
added 2005/11/16 7:37 a.m.14 views

CVE-2003-1247

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via 1 a long URL content type in CGI::readFile, 2 a long path in diskusage, and 3 a long fname in flist...

7.8AI score0.52927EPSS
Exploits1References11
Rows per page
Query Builder