USN-7207-1 git vulnerabilities

It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use this issue to mislead the user into typing passwords for trusted sites that would then be sent to untrusted sites instead. CVE-2024-50349 It was discovered that git incorrectly...

CVE-2024-53263 Git LFS permits exfiltration of credentials via crafted HTTP URLs

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...

BIT-PHP-MIN-2024-4577 Argument Injection in PHP-CGI

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...

CVE-2025-21224

Windows Line Printer Daemon LPD Service Remote Code Execution Vulnerability...

CVE-2025-21224

Windows Line Printer Daemon LPD Service Remote Code Execution Vulnerability...

CVE-2025-21224 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

...

CVE-2025-21224

CVE-2025-21224 refers to a Windows Line Printer Daemon (LPD) Service remote code execution vulnerability. The primary connected sources indicate an attacker could exploit a network remote vector to achieve code execution with no user interaction, with a CVSSv3.1 base score of 8.1 (AV:N/AC:H/PR:N/...

CVE-2025-23052 Authenticated Command Injection Vulnerability allows Unauthorized Command Execution in CLI Interface

Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2025-23052

CVE-2025-23052 describes an authenticated command injection vulnerability in the CLI of Hewlett Packard Enterprise ArubaOS network management service. The issue allows an authenticated attacker with high privileges to execute arbitrary commands as the underlying OS user. The initial documents ind...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-40587

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests...

CVE-2024-26012

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiAP-S 6.2 all verisons, and 6.4.0 through 6.4.9, FortiAP-W2 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.3, and 7.4.0 through 7.4.2, FortiAP 6.4 all versions, 7.0 all versions, 7.2....

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

...

Fortinet FortiMail和FortiRecorder 操作系统命令注入漏洞

Fortinet FortiRecorder and Fortinet FortiMail are both products of Fortinet, Inc.Fortinet FortiRecorder is a Web-based network video recorder management system.Fortinet FortiMail is an email security gateway products. Fortinet FortiMail is an email security gateway that provides email security an...

PT-2025-1159 · Microsoft · Windows Line Printer Daemon (Lpd) Service +1

Name of the Vulnerable Software and Affected Versions: Windows Line Printer Daemon LPD Service affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in the Windows Line Printer Daemon LPD service. This vulnerability can be exploited by a remote...

PT-2025-3301 · Fortinet · Fortirecorder +1

Name of the Vulnerable Software and Affected Versions: FortiMail versions 6.4.0 through 6.4.7 FortiMail versions 7.0.0 through 7.0.6 FortiMail versions 7.2.0 through 7.2.4 FortiRecorder versions 6.4.0 through 6.4.4 FortiRecorder version 7.0.0 Description: An improper neutralization of special...

Fortinet FortiAP 操作系统命令注入漏洞

Fortinet FortiAP is a controller for managing wireless access point devices from Fortinet, Inc. Fortinet FortiAP suffers from an operating system command injection vulnerability that arises from an improper neutralization of special elements used in operating system commands, which can be exploit...

Git 安全漏洞

Git is a free, open source distributed version control system open-sourced by Git. A security vulnerability exists in Git that stems from parsing a single carriage return as a line break...

PT-2025-4794 · Hewlett Packard · Hpe Aruba Networking Aos

The network management service is affected by an authenticated command injection issue in its command line interface, which could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system. Unfortunately, the specific versions of the network management...

Fortinet FortiOS和Fortinet FortiProxy 注入漏洞

Fortinet FortiOS and Fortinet FortiProxy are both products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content...