Arbitrary Command Execution

guake is vulnerable to arbitrary command execution. An attacker can inject and execute malicious commands through the executecommand and executecommandbyuuid functions of dbusiface.py...

Command Injection

firefox-esr is vulnerable to command injection. The constructed curl command from the Copy as curl feature in DevTools is not correctly escaped from PowerShell, allowing an attacker to inject and execute malicious commands...

WordPress Wpcalc plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers.The WordPress WPcalc plugin in version 2.1 and earlier is vulnerable to SQL injection, which stems from the plugin'...

ToTolink Ex200 Command Injection Vulnerability

ToTolink Ex200 is a 2.4G wireless N-range extender from ToTolink China. It is designed to extend the coverage of existing Wi-Fi networks and eliminate "blind spots". The ToTolink Ex200 suffers from a command injection vulnerability, which arises from the failure of a network system or product to...

Pluck code issue vulnerability (CNVD-2021-100243)

Pluck is a content management system CMS developed using the PHP language. a code issue vulnerability exists in Pluck, which originates from the product's admin backend page that does not validate file content. An attacker could execute malicious commands through this vulnerability...

Nagios XI Remote Code Execution Vulnerability

Nagios XI contains a remote code execution vulnerability in which a user can modify the checkplugin executable and insert malicious commands to execute as root...

CVE-2021-22403

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22403

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22403

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

Design/Logic Flaw

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22403

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

Remote Code Execution (RCE)

chromium is vulnerable to remote code executionRCE. The vulnerability exists due to the incorrect security UI in Web Browser UI, which allows an attacker to inject and execute malicious commands...

CVE-2021-36260

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands...

Command Injection

systeminformation vulnerable to Command Injection. The si.services function does not properly validate the input strings, allowing a malicious user to inject and execute malicious commands...

Command Execution Vulnerability in Changsha Deshaun DSMall

DSMall is a simple and easy to operate, can help enterprises quickly build a comprehensive mall platform similar to Jingdong / Tmall system. A command execution vulnerability exists in Changsha Deshaun DSMall, which can be exploited by attackers to obtain sensitive information and execute malicio...

Huawei Emui and Magic UI processing logic error vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a processing logic error, which stems from a configuration flaw in the device. An attacker could exploit the vulnerability to hijac...

CVE-2021-22352

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

Design/Logic Flaw

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22352

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22352

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...