CVE-2019-19217

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

CVE-2019-19217

CVE-2019-19217 affects BMC Control-M/Agent 7.0.00.000. Described in CNVD-2020-26845 and NVD entry as OS command injection via the TCP protocol used between Control-M/Agent and Control-M/Server; a remote attacker could submit a crafted request to execute arbitrary commands. No remediation details ...

CVE-2019-19220

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

CVE-2019-19220

CVE-2019-19220 affects BMC Control-M/Agent 7.0.00.000. Descriptions across sources indicate an OS command injection vulnerability (issue 2 of 2) in Control-M/Agent. CNVD-2020-26846 notes a remote-command injection risk when using TCP, enabling arbitrary OS command execution by a crafted request. ...

CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

CVE-2020-12246

Beeline Smart Box 2.0.38 is affected by CVE-2020-12246, a OS command injection in the Diagnostics page (Advanced settings > Other > Diagnostics) via the Ping (ping_ipaddr), Nslookup (nslookup_ipaddr), and Traceroute (traceroute_ipaddr) parameters. Public sources in the connected set (NVD, R...

CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

CVE-2020-11941

An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery...

CVE-2020-11941

An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery...

CVE-2020-11941

Open-AudIT 3.2.2 contains multiple vulnerabilities. An authenticated attacker can exploit OS command injection in the Discovery module by unsafely handling data[attributes][other][nmap][ssh_ports], enabling remote code execution (reverse shell) on the appliance, as demonstrated in the Core Securi...

OS Command Injection

git-promise is vulnerable to OS commnad injection. User input is not validated and sanitized before being passed to the git function and executed...

Open-AudIT Multiple Vulnerabilities

Advisory ID Internal CORE-2020-0009 1. Advisory Information Title: Open-AudIT Multiple Vulnerabilities Advisory ID: CORE-2020-0009 Advisory URL: https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities Date published: 2020-04-27 Date of last update: 2020-04-24 Vendors...

OS Command Injection

npm-programmatic is vulnerable to OS command injection. The packages and option properties are concatenated and directly passed to an exec function...

CVE-2020-7350

CVE-2020-7350 affects Rapid7 Metasploit Framework libnotify plugin. Versions before 5.0.85 allow OS command injection via untrusted data in a remote hostname/service name; an attacker must supply a crafted file processed by db_import to trigger code execution on the operator’s terminal. A fix was...

NETGEAR D3600, D6000 and XR500 OS Command Injection Vulnerability (CNVD-2020-27257)

NETGEAR D3600 and others are products of NETGEAR Corporation.NETGEAR D3600 is a wireless modem.NETGEAR D6000 is a wireless modem.NETGEAR XR500 is a wireless router.NETGEAR XR500 is a wireless router. An operating system command injection vulnerability exists in the NETGEAR D3600 prior to version...

NETGEAR R7800 and XR500 OS Command Injection Vulnerability (CNVD-2020-27261)

The NETGEAR XR500 and NETGEAR R7800 are both wireless routers from NETGEAR. An operating system command injection vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.60 and the XR500 prior to version 2.3.2.32, which can be exploited by an attacker to execute illegal operating system...

CVE-2020-7350

Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer’s hostname or service name. An attacker can create a specially-crafted hostname or service name to b...

CVE-2020-9478

An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems...

Command injection

An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems...

CVE-2020-9478

CVE-2020-9478 affects Rubrik 5.0.3-2296. The vulnerability is an OS command injection that permits an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems. Exploitation details, affected components beyond the product/version, and concrete remediation steps are not p...