PT-2020-4973 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.6.8 Description: The issue is related to a race condition between coredump operations and the IORING OP MADVISE implementation in the do madvise function of the Linux kernel. This condition may allow an attack...

Remote Code Execution (RCE)

op-browser is vulnerable to remote code execution RCE. The attack exist because it does not validate the user-provided value to url parameter, allowing an attacker to inject arbitrary code through it...

Op-browser Command Injection Vulnerability

op-browser is a module for opening browser windows and setting up proxies. A command injection vulnerability exists in op-browser 1.0.6 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary commands via the url function...

CVE-2020-7625

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

CVE-2020-7625

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

Command injection

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

CVE-2020-7625

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

CVE-2020-7625

CVE-2020-7625 affects the Node module op-browser . Versions up to and including 1.0.6 are vulnerable to a command injection that allows an attacker to execute arbitrary commands via the vulnerable url function. The issue can lead to remote code execution (RCE) with high impact. Remediation: upgra...

CVE-2020-7625

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

CVE-2020-7625

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

Command Injection

Overview op-browser is a module that open browser window and set proxy. Affected versions of this package are vulnerable to Command Injection. The url parameter can be controlled by users without any sanitization. PoC var root = require"op-browser"; root.open'chrome','& touch Song','',''; Details...

hiproxy (1.3.3) potentially affected by CVE-2020-7625 via op-browser (1.0.6)

op-browser NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on op-browser and may be impacted: - hiproxy 1.3.3 Source cves: CVE-2020-7625 Source advisory: SNYK:JS-OPBROWSER-564259...

PT-2020-19662

Name of the Vulnerable Software and Affected Versions op-browser versions 1.0.0 through 1.0.6 op-browser versions 1.0.7 through 1.0.9 Description The issue allows execution of arbitrary commands via the url function, enabling Command Injection attacks. Recommendations For versions 1.0.0 through...

CVE-2020-7625: Improper Neutralization of Special Elements used in an OS Command

op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

creagraphy.nl Cross Site Scripting vulnerability OBB-1102870

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-20595

Name of the Vulnerable Software and Affected Versions fauzantrif eLection version 2.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "admin/ajax/op kandidat.php" API endpoint. This allows for potential exploitation. No information is provided about the...

op-ameland.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1085279 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Vulnerability of the i2400m_op_rfkill_sw_toggle() function (driver/net/wimax/i2400m/op-rfkill.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the i2400moprfkillswtoggle function driver/net/wimax/i2400m/op-rfkill.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2019-19051

CVE-2019-19051 : A memory leak in the Linux kernel function i2400m_op_rfkill_sw_toggle() (drivers/net/wimax/i2400m/op-rfkill.c) prior to 5.3.11 can allow a local attacker to cause memory exhaustion and denial of service. The issue is fixed in 5.3.11 (ChangeLog-5.3.11). References include related ...

CVE-2019-19051

A memory leak in the i2400moprfkillswtoggle function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption, aka CID-6f3ef5c25cc7...