30371 matches found
CVE-2021-26377
Insufficient parameter validation while allocating process space in the Trusted OS TOS may allow for a malicious userspace process to trigger an integer overflow, leading to a potential denial of service...
CVE-2025-7388
It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...
Exploit for Use After Free in Microsoft
PoC exploit for CVE-2019-0708, a RCE vulnerability in Windows systems, including Windows 2003, Windows XP, Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2. The vulnerability occurs during pre-authorization and allows an attacker to run arbitrary malicious code in the NT...
PT-2025-36374
Name of the Vulnerable Software and Affected Versions: Trusted OS affected versions not specified Description: Insufficient parameter validation during process space allocation in the Trusted OS TOS can allow a malicious userspace process to trigger an integer overflow, potentially leading to a...
CVE-2025-47421
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP command sent via SSH login string can lead...
CVE-2025-55037
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...
Command Injection
Overview TkEasyGUI is a TkEasyGUI is simple GUI Library for Python3 with Tkinter Affected versions of this package are vulnerable to Command Injection via improper neutralization of special elements in the popupnotify method. An attacker can execute arbitrary operating system commands by sending...
Important Photon OS Security Update - PHSA-2025-4.0-0865
Updates of 'libsoup' packages of Photon OS have been released...
TkEasyGUI 操作系统命令注入漏洞
TkEasyGUI is a GUI library in Python by the individual developer kujirahand. An operating system command injection vulnerability exists in TkEasyGUI versions prior to 1.0.22, which stems from improper neutralization of a special element and could allow a remote, unauthenticated attacker to execut...
CVE-2024-49739
In MMapVAccess of pmros.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-23261
NVIDIA Cumulus Linux and NVOS contain a log information disclosure vulnerability where hashed user passwords are not properly suppressed in log files, potentially exposing them to unauthorized users. Root cause: sensitive password hashes are logged instead of being hidden. Impact: information dis...
CVE-2025-23261
NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users...
GHSA-67MF-3CR5-8W23 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips, elasticsearch...
CVE-2025-7388 Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface
It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...
CVE-2025-7388 Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface
It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...
Unexpected paths returned from LookPath in os/exec
...
Moderate Photon OS Security Update - PHSA-2025-5.0-0613
Updates of 'mariadb' packages of Photon OS have been released...
Google Wear OS 安全漏洞
Google Wear OS is a Google-developed operating system from Google, Inc. in the United States, specifically designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from a logic error that could lead to the enabling ...
Google Wear OS 安全漏洞
Google Wear OS is a Google-developed operating system from Google, Inc. in the United States, specifically designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from a lack of permission checking, which could lea...