9 matches found
MAL-2026-13481 Malicious code in cdf-tag-commander-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945179057c5bd93b985c3c532baa35379ce9dd9603e26d17e63201beb25868ae The preinstall lifecycle script in [email protected] runs automatically on npm install. It executes whoami and hostname, retrieves the...
TOTOLINK N200RE 安全漏洞
The TOTOLINK N200RE is a wireless broadband router for small office or home SOHO environments. The TOTOLINK N200RE suffers from a command injection vulnerability that stems from a command injection of hostName in setOpModeCfg. No details of the vulnerability are provided at this time...
EUVD-1999-1564
Malware in sbrugna...
SUSE CVE-2007-5839
The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...
CVE-2022-44794: Improper Control of Generation of Code
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remote attacker to execute arbitrary Bash code with root privileges. The command that sets the hostname doesn't validate input parameters. As a result, arbitrary data goes directly to...
IBM Spectrum Protect Plus hostname Command Injection
The IBM Spectrum Protect Plus SPP administrative console running on the remote host is affected by a remote command injection vulnerability due to improper validation of user-supplied data when processing a 'set hostname' HTTP request. An unauthenticated, remote attacker can exploit this, via a...
CVE-2009-0471: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the HTTP server in Cisco IOS 12.423 allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request...
