12510 matches found
CVE-2020-7629
CVE-2020-7629 affects install-package up to version 0.4.0 and is a Command Injection vulnerability that allows execution of arbitrary commands via the options argument. The issue is documented across multiple sources (NVD/Red Hat/OSV/GHSA/Snyk) with severity ranging from High to Critical (CVSS v3...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
Unspecified Vulnerability in Deskpro (CNVD-2020-22253)
Deskpro is a helpdesk software solution that helps companies manage communication with their customers and user base across multiple channels. A security vulnerability exists in Deskpro. An attacker could exploit the vulnerability to be able to control/install helpdesk applications and disclose t...
compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)
install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: SNYK:JS-INSTALLPACKAGE-564267...
PT-2020-2801
Name of the Vulnerable Software and Affected Versions umount versions 1.1.0 through 1.1.6 install-package versions 1.1.0 through 1.1.6 Description The issue is related to Command Injection. The device argument can be controlled by users without sanitization, allowing the execution of arbitrary...
PT-2020-19665
Name of the Vulnerable Software and Affected Versions install-package versions 0.4.0 and earlier Description The issue allows execution of arbitrary commands via the options argument, enabling Command Injection attacks. Recommendations For versions 0.4.0 and earlier, consider restricting the use ...
Command Injection
Overview install-package is a package that installs node modules from JavaScript. Affected versions of this package are vulnerable to Command Injection. The argument options can be controlled by users without any sanitization. PoC var root = require"install-package"; root"", "& touch Song"; Detai...
Libosinfo: osinfo-install-script option leaks password via command line argument
A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin passwords via command line arguments. This could allow guest passwords to leak to other system users via a process listing...
Webkiller v2.0 - Tool Information Gathering
Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝████&9608 ;╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗...
CVE-2020-3761
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...
Windows Media Foundation Privilege Escalation
The vulnerability of the Windows Media Foundation component in Windows operating systems arises from incorrect handling of objects in memory. Exploiting this vulnerability allows attackers to install programs, view, modify, delete data, or create new user accounts with full privileges using a...
Option to Install Veeam ONE Agent is Unavailable (Greyed Out)
Challenge When attempting to install the Veeam ONE Agent on a Veeam Backup Server, theInstall agent option is unavailable and greyed out. Cause There are several possible causes for this issue: The Veeam ONE Agent is already installed on the Veeam Backup & Replication Server. The Veeam ONE Server...
CVE-2019-19335
CVE-2019-19335 affects OpenShift 4.2 installer (ose-installer). During cluster installation, openshift-install creates an auth directory containing kubeconfig and kubeadmin-password, which are incorrectly world-readable, exposing API credentials. Multiple sources (NVD, OSV, Red Hat advisories) co...
CVE-2019-19335
During installation of an OpenShift 4 cluster, the openshift-install command line tool creates an auth directory, with kubeconfig and kubeadmin-password files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions...
CVE-2019-19335: Incorrect Permission Assignment for Critical Resource
During installation of an OpenShift 4 cluster, the openshift-install command line tool creates an auth directory, with kubeconfig and kubeadmin-password files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions...
This Stalkerware Delivers Extra-Creepy Features
Researchers are sending up a red flag over the distribution of an aggressive stalkerware app called Monitor Minor. In a report released Monday, researchers said the Android version of the app gives stalkers near absolute control of targeted devices, going so far as allowing them to capture the...
Umbraco Code Issue Vulnerability
Umbraco is a Danish company Umbraco C written in open source content management system CMS. A security vulnerability exists in Umbraco CMS version 8.5.3. The vulnerability can be exploited by an attacker to upload files and execute code via the Install Package feature...
Umbraco Cloud Code Issue Vulnerability
Umbraco is a Danish company Umbraco a set of C written in open source content management system CMS.Umbraco Cloud is the cloud version of Umbraco. A security vulnerability exists in Umbraco Cloud version 8.5.3. The vulnerability can be exploited by an attacker to upload files and execute code wit...
