23 matches found
CVE-2026-51740
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51740
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-83979
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51740
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2026-68741
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
EUVD-2005-2948
Malware in sbrugna...
EUVD-2005-2947
Malware in sbrugna...
CVE-2021-23348
This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...
CVE-2021-23348 Arbitrary Command Injection
This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...
CVE-2021-23348
This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...
Arbitrary Command Injection
Overview portprocesses is a This tool letes you list and kill processes on a specified port. Affected versions of this package are vulnerable to Arbitrary Command Injection. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary...
CVE-2012-6501
The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...
Code injection
The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...
CVE-2012-6501
The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...
HP PKI ActiveX Control KillProcess Denial of Service
The version of the HP PKI ActiveX control installed on the remote Windows host is earlier than 1.2.0.1. As such, it reportedly contains an insecure method named 'KillProcess' that could be used to terminate arbitrary user processes. C Tenable Network Security, Inc. include"compat.inc"; if...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...
CVE-2009-1464
Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...
CVE-2005-2947
Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource...