CVE-2021-22403: Undefined Security Weakness

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

Remote Code Execution (RCE)

chromium is vulnerable to remote code executionRCE. The vulnerability exists due to the incorrect security UI in Web Browser UI, which allows an attacker to inject and execute malicious commands...

CVE-2021-36260

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands...

Command Injection

systeminformation vulnerable to Command Injection. The si.services function does not properly validate the input strings, allowing a malicious user to inject and execute malicious commands...

Command Execution Vulnerability in Changsha Deshaun DSMall

DSMall is a simple and easy to operate, can help enterprises quickly build a comprehensive mall platform similar to Jingdong / Tmall system. A command execution vulnerability exists in Changsha Deshaun DSMall, which can be exploited by attackers to obtain sensitive information and execute malicio...

Huawei Emui and Magic UI processing logic error vulnerability

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a processing logic error, which stems from a configuration flaw in the device. An attacker could exploit the vulnerability to hijac...

CVE-2021-22352

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

Design/Logic Flaw

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22352

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22352

There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...

CVE-2021-22352

CVE-2021-22352 describes a configuration defect vulnerability affecting Huawei smartphones running EMUI and Magic UI. The issue allows an attacker to hijack the device and forge the UI to induce users to execute malicious commands. Connected sources consistently reference a UI-forgery/processing‑...

华为智能手机处理逻辑错误漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a processing logic error, which stems from a configuration flaw in the device. An attacker could exploit the vulnerability to hijac...

Replacement of bash script by an attacker to one that includes malicious commands in Codecov Bash uploader version All versions downloaded from Jan 2021 through April 2021. Because the attacker had control of the script the version # included in it cannot be trusted.

In Codecov Codecov Bash uploader version All versions downloaded from Jan 2021 through April 2021. Because the attacker had control of the script the version included in it cannot be trusted. a Replacement of bash script by an attacker to one that includes malicious commands exists in the The Bas...

GSD-2021-1000009 Replacement of bash script by an attacker to one that includes malicious commands in Codecov Bash uploader version All versions downloaded from Jan 2021 through April 2021. Because the attacker had control of the script the version # included in it cannot be trusted.

In Codecov Codecov Bash uploader version All versions downloaded from Jan 2021 through April 2021. Because the attacker had control of the script the version included in it cannot be trusted. a Replacement of bash script by an attacker to one that includes malicious commands exists in the The Bas...

Command Execution Vulnerability in DC of Log Center Platform of DeepTrust Technology Co.

DeepService Technology Co., Ltd. is a product and service provider specializing in enterprise-class security, cloud computing and infrastructure. A command execution vulnerability exists in the DC of the Log Center platform of DeepService Technology Corporation, which can be exploited by an...

Command Injection

systeminformation vulnerable to Command Injection. The dockerContainerProcesses function in docker.js does not properly validate the input strings, allowing a malicious user to inject and execute malicious commands...

Command Execution Vulnerability in Youyou Firewall Gateway Management System (CNVD-2021-36254)

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Command Execution Vulnerability in Firewall Gateway Management System of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Remote Code Execution (RCE)

Golang is vulnerable to remote code execution. When executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly, it is only vulnerable in GOPATH mode, but not in module mode the distinction is documented at...

Backdoor / Malicious code

lita-coin 0.0.3 contains a backdoor mechanism that allows launching of hidden cryptocurrency mining operations inside the project. The code also contained a backdoor mechanism that allowed the attacker to send a cookie file back to a compromised project, and allow the attacker to execute maliciou...