2 matches found
PT-2022-3524 · Exo +4 · Exo +4
Name of the Vulnerable Software and Affected Versions: XFCE version 4.16 Description: The issue allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server. This is related to errors in security settings in the exo application libra...
CVE-2019-3984
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet...