1919 matches found
CVE-2023-40983
A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...
Cross site scripting
A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...
CVE-2023-40983
A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...
CVE-2023-40983
A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...
Webmin Cross-Site Scripting Vulnerability
Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. A cross-site scripting vulnerability exists in Webmin v2.100. An attacker can exploit this vulnerability by injecting a specially crafted payload into a "Find in Results" file to...
CVE-2023-40983
A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Find in Results file...
PT-2023-27730 · Webmin · Webmin
Name of the Vulnerable Software and Affected Versions: Webmin version 2.100 Description: A reflected cross-site scripting XSS issue in the File Manager function allows attackers to execute malicious scripts by injecting a crafted payload into the Find in Results file. This enables the execution o...
Command Injection Vulnerability in find-exec
Older versions of the package are vulnerable to Command Injection as an attacker controlled parameter. As a result, attackers may run malicious commands. For example: const find = require"find-exec"; find"mplayer; touch hacked" This creates a file named "hacked" on the filesystem. You should neve...
currentrequest (>=1.0.0, <=1.0.6), daichainai-moi (>=1.0.0, <=1.0.2) +5 more potentially affected by CVE-2023-40582 via find-exec (>=1.0.0, <=1.0.2)
find-exec NPM version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.15, =1.1.2, =1.1.5 Source cves: CVE-2023-40582 Source advisory: OSV:GHSA-95RP-6GQP-6622...
GHSA-95RP-6GQP-6622 Command Injection Vulnerability in find-exec
Older versions of the package are vulnerable to Command Injection as an attacker controlled parameter. As a result, attackers may run malicious commands. For example: const find = require"find-exec"; find"mplayer; touch hacked" This creates a file named "hacked" on the filesystem. You should neve...
CVE-2023-40582
find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input and are vulnerable to Command Injection via an attacker controlled parameter. As a result, attackers may run malicious shell commands in the context of the running process. This...
CVE-2023-40582 Command Injection Vulnerability in find-exec
find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input and are vulnerable to Command Injection via an attacker controlled parameter. As a result, attackers may run malicious shell commands in the context of the running process. This...
CVE-2023-40582
The CVE pertains to the find-exec utility, where earlier versions (prior to 1.0.3) fail to properly escape user input, enabling Command Injection via attacker-controlled parameters. This could allow an attacker to run arbitrary shell commands with the privileges of the running process. The issue ...
CVE-2023-40582 Command Injection Vulnerability in find-exec
find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input and are vulnerable to Command Injection via an attacker controlled parameter. As a result, attackers may run malicious shell commands in the context of the running process. This...
find-exec 操作系统命令注入漏洞
find-exec is a shime personal developer that takes a list of shell commands and returns the first available command. An operating system command injection vulnerability exists in find-exec versions prior to 1.0.3, which stems from the inability to properly escape user input and the ease with whic...
PT-2023-27519
Name of the Vulnerable Software and Affected Versions find-exec versions prior to 1.0.3 Description The issue is related to Command Injection, where attackers may run malicious shell commands in the context of the running process due to improper escaping of user input. This can be achieved via an...
SUSE CVE-2022-48065
GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c...
find-me-contractors.com Cross Site Scripting vulnerability OBB-3610731
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
