CVE-2020-22249

Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious plugin which contains the php files with extensions like PHP,phtml,php7 will be copied to the plugins directory which would lead to the...

Virus.Win32.Shodi.e Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/37d4a5ba123dd32f1e2c4ba0be14e77cB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Shodi.e Vulnerability: Unauthenticated Remote Command Execution Description: The virus...

PT-2024-11348 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The powerpc kernel is not prepared to handle exec faults from kernel. The function is exec fault returns 'false' when an exec fault is taken by kernel, because the check is based on...

PT-2021-28328

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with a type of UNKNOWN READ. The crash state includes functions such as mrb vm ci env, cipop, and mrb vm exec. No information i...

PT-2021-28326

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the following functions: mrb vm exec, mrb vm run, mrb top run. Recommendations...

GHSA-V85C-HGQ5-7PFW Arbitrary Command Injection

This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23399

This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

PT-2021-15491

Name of the Vulnerable Software and Affected Versions wincred versions all Description The issue allows an attacker to execute arbitrary commands if attacker-controlled user input is given to the getCredential function. This is due to the use of the child process exec function without input...

CVE-2021-23399: Improper Neutralization of Special Elements used in an OS Command

This affects all versions of package wincred. If attacker-controlled user input is given to the getCredential function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

HashiCorp Nomad Remote Command Execution Exploit

This Metasploit module lets you create a batch job on HashiCorp's Nomad service to spawn a shell. The default option is to use the rawexec driver, which runs with high privileges. Development servers and clients explicitly enabling the rawexec plugin can spawn these type of jobs. Regular exec job...

PT-2021-19855

Name of the Vulnerable Software and Affected Versions magento-scripts versions 1.5.1 through 1.5.2 Description The issue arises from the change of a function from synchronous to asynchronous without implementing a handler in the start, stop, exec, and logs commands, making them unusable...

CVE-2021-20198

A flaw was found in the OpenShift Installer. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this port during installation can make unauthenticated /exec...

PT-2021-28300

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, called by mrb f sprintf and mrb vm exec...

PT-2021-24439

Name of the Vulnerable Software and Affected Versions: Singularity versions prior to 3.7.4 Description: The issue arises from the incorrect use of a default URL in singularity action commands, specifically run, shell, and exec, when a container is specified using a library:// URI. This causes the...

PT-2021-24848

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.10.36 Description: The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attac...

PT-2021-24751

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in Linux Kernel version v5.12.4. The actual impact...

PT-2021-28842

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.36 Description The issue is related to a use-after-free in the zynqmp qspi exec op function. This problem was introduced in version v5.10 and is fixed in version v5.10.37. The actual impact and attack...

CVE-2021-32635

Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, "singularity" action commands "run"/"shell"/"exec" specifying a container using a "library://" URI will always attempt to retrieve the container from the default remote endpoint...

CVE-2021-32635: Improper Restriction of Communication Channel to Intended Endpoints

Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, singularity action commands run/shell/exec specifying a container using a library:// URI will always attempt to retrieve the container from the default remote endpoint...

PT-2021-28277

Name of the Vulnerable Software and Affected Versions: MRuby affected versions not specified Description: The issue is related to a crash caused by an unknown read. Technical details about the crash include the involvement of specific functions such as mrb ary shift m, mrb vm exec, and mrb vm run...