EUVD-2005-2947

Malware in sbrugna...

EUVD-2005-2948

Malware in sbrugna...

CVE-2021-23348

This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23348 Arbitrary Command Injection

This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23348

This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

Arbitrary Command Injection

Overview portprocesses is a This tool letes you list and kill processes on a specified port. Affected versions of this package are vulnerable to Arbitrary Command Injection. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary...

CVE-2012-6501

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

Code injection

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

CVE-2012-6501

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

HP PKI ActiveX Control KillProcess Denial of Service

The version of the HP PKI ActiveX control installed on the remote Windows host is earlier than 1.2.0.1. As such, it reportedly contains an insecure method named 'KillProcess' that could be used to terminate arbitrary user processes. C Tenable Network Security, Inc. include"compat.inc"; if...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...

CVE-2009-1464

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...

CVE-2005-2947

Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource...

CVE-2005-2947

CVE-2005-2947 describes a buffer overflow in KillProcess version 2.20 and earlier, triggered by an executable file containing a long FileDescription in the version resource. The vulnerability can allow user‑assisted attackers to execute arbitrary code. The provided connected documents do not spec...

CVE-2005-2948

KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are not all killed by KillProcess...

CVE-2005-2948

Technical details about CVE-2005-2948 are not publicly provided in the available connected documents. Monitor for updates.

CVE-2005-2947

Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource...

KillProcess administration utility buffer overflow

Buffer overflow on oversized process PE FileDescription field...