8430 matches found
CVE-2025-2733
A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown part of the file app/tool/pythonexecute.py of the component Prompt Handler. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The...
CVE-2025-2733 mannaandpoem OpenManus Prompt python_execute.py os command injection
A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown part of the file app/tool/pythonexecute.py of the component Prompt Handler. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The...
CVE-2025-2733
CVE-2025-2733 affects mannaandpoem OpenManus up to 2025.3.13. The vulnerability is an OS command injection in the Prompt Handler’s file app/tool/python_execute.py, enabling remote exploitation. Exploitation information is publicly disclosed and the vendor was contacted but did not respond. No rem...
CVE-2025-2733 mannaandpoem OpenManus Prompt python_execute.py os command injection
A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown part of the file app/tool/pythonexecute.py of the component Prompt Handler. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The...
CVE-2025-2717
A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub41710C of the file /goform/diagnslookup of the component HTTP POST Request Handler. The manipulation of the argument targetaddr leads to os command injection. The...
CVE-2025-2717 D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection
A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub41710C of the file /goform/diagnslookup of the component HTTP POST Request Handler. The manipulation of the argument targetaddr leads to os command injection. The...
CVE-2025-2717 D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection
A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub41710C of the file /goform/diagnslookup of the component HTTP POST Request Handler. The manipulation of the argument targetaddr leads to os command injection. The...
CVE-2025-2701 AMTT Hotel Broadband Operation System port_setup.php popen os command injection
A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/portsetup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/SwitchIndex/SwitchState leads to os command...
CVE-2025-2701 AMTT Hotel Broadband Operation System port_setup.php popen os command injection
A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/portsetup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/SwitchIndex/SwitchState leads to os command...
CVE-2025-2701
CVE-2025-2701 affects AMTT Hotel Broadband Operation System 1.0. The vulnerability is in the function popen used by the file /manager/network/port_setup.php . Manipulating the arguments SwitchVersion , SwitchWrite , SwitchIP , SwitchIndex , or SwitchState leads to an OS command injection. The imp...
CVE-2024-10019
A vulnerability in the startappserver function of parisneo/lollms-webui V12 Strawberry allows for path traversal and OS command injection. The function does not properly sanitize the appname parameter, enabling an attacker to upload a malicious server.py file and execute arbitrary code by...
Exploit for OS Command Injection in Php
This is POC of CVE 2024-4577 This exploit allows attac...
CVE-2024-10019
A vulnerability in the startappserver function of parisneo/lollms-webui V12 Strawberry allows for path traversal and OS command injection. The function does not properly sanitize the appname parameter, enabling an attacker to upload a malicious server.py file and execute arbitrary code by...
CVE-2024-10019
The CVE-2024-10019 entry concerns parisneo/lollms-webui V12 (Strawberry), where the start_app_server function does not sanitize the app_name parameter, enabling path traversal and OS command injection. This can allow an attacker to upload a malicious server.py and run arbitrary code. Connected so...
CVE-2024-10019 Path Traversal and OS Command Injection in parisneo/lollms-webui
A vulnerability in the startappserver function of parisneo/lollms-webui V12 Strawberry allows for path traversal and OS command injection. The function does not properly sanitize the appname parameter, enabling an attacker to upload a malicious server.py file and execute arbitrary code by...
CVE-2024-10019 Path Traversal and OS Command Injection in parisneo/lollms-webui
A vulnerability in the startappserver function of parisneo/lollms-webui V12 Strawberry allows for path traversal and OS command injection. The function does not properly sanitize the appname parameter, enabling an attacker to upload a malicious server.py file and execute arbitrary code by...
CVE-2024-10019 Path Traversal and OS Command Injection in parisneo/lollms-webui
A vulnerability in the startappserver function of parisneo/lollms-webui V12 Strawberry allows for path traversal and OS command injection. The function does not properly sanitize the appname parameter, enabling an attacker to upload a malicious server.py file and execute arbitrary code by...
CVE-2025-25220
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in +F FS010M versions prior to V2.0.11101. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker...
CVE-2025-24306
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in +F FS010M versions prior to V2.0.01101. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker with an administrative privilege...