8009 matches found
CVE-2023-25826
CVE-2023-25826 affects OpenTSDB via unauthenticated command injection in the HTTP query path (legacy API). The issue stems from insufficient validation of parameters (notably in the query API), allowing crafted commands to bypass regex filters and execute on the host. Public writeups and exploits...
CVE-2023-25826 Remote Code Execution in OpenTSDB
Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that was made when this vulnerability was...
CVE-2023-29778
GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread...
CVE-2023-2479
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
CVE-2023-2479 OS Command Injection in appium/appium-desktop
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
CVE-2023-29778
GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread...
CVE-2023-2479 OS Command Injection in appium/appium-desktop
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
CVE-2023-29778
GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread...
PT-2023-22414 · Gl.Inet · Gl-Inet Mt3000
Name of the Vulnerable Software and Affected Versions: GL.iNET MT3000 version 4.1.0 Release 2 Description: The issue is related to OS Command Injection, which can be exploited via the /usr/lib/oui-httpd/rpc/logread endpoint. This allows for potential execution of system commands, posing a securit...
CVE-2023-2479
CVE-2023-2479 affects Appium Desktop (appium-desktop) prior to v1.22.3-4. The connected Nuclei template documents an OS Command Injection vulnerability in the Appium Desktop Server, exploitable via an untrusted URL parameter, allowing unauthenticated attackers to execute arbitrary commands and po...
CVE-2023-29778
GL.iNET MT3000 4.1.0 Release 2 is documented as vulnerable to an OS Command Injection via the /usr/lib/oui-httpd/rpc/logread endpoint. The affected component is the logread handler in the oui-httpd path; CVSS v3.1 metrics indicate a critical impact (CRITICAL, 9.8) affecting confidentiality, integ...
PT-2023-19784 · Unknown · Appium-Desktop
Name of the Vulnerable Software and Affected Versions: appium-desktop versions prior to 1.22.3-4 Description: The issue is an OS Command Injection, which affects the GitHub repository appium/appium-desktop. Recommendations: For versions prior to 1.22.3-4, update to version 1.22.3-4 or later to...
Exploit for OS Command Injection in Wwbn Avideo
WWBN Avideo Authenticated RCE - OS Command Injection CVE-20...
CVE-2023-30854 WWBN AVideo vulnerable to OS Command Injection
AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint /plugin/CloneSite/cloneClient.json.php allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4...
CVE-2023-30854
WWBN AVideo (open-source video platform) has a documented OS command-injection vulnerability in the authenticated endpoint /plugin/CloneSite/cloneClient.json.php. Attackers can achieve Remote Code Execution via this endpoint, with the issue fixed in version 12.4 per CVE-2023-30854. Red Hat adviso...
openSUSE 15 Security Update : liferea (openSUSE-SU-2023:0096-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0096-1 advisory. - A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function updatejobrun of the file src/update.c of th...
Remote code injection in wwbn/avideo
WWBN Avideo Authenticated RCE - OS Command Injection Description An OS Command Injection vulnerability in an Authenticated endpoint /plugin/CloneSite/cloneClient.json.php allows attackers to achieve Remote Code Execution. Vulnerable code: php $cmd = "wget -O $clonesDir$json-sqlFile...
CVE-2023-28400 CVE-2023-28400
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands...
CVE-2023-28400
CVE-2023-28400 affects mySCADA myPRO, versions 8.26.0 and earlier. The vulnerability arises from parameters that an authenticated user can abuse to inject arbitrary operating system commands (OS Command Injection, CWE-78). Exploitation is described as possible remotely with low attack complexity ...