3 matches found
Malicious code in my-empty-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914ffc98ce1f6553e4f9655208318800d0d22663842eb4c9a3d0d51d4f143bdd package.json declares postinstall: node index.js. On npm install, index.js branches on os.platform and executes platform-specific shell commands:...
Cisco IOS USB Modem Arbitrary Command Execution
The vulnerability of the Cisco ASR 920 router’s USB modem code exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a local attacker to inject and execute arbitrary commands by modifying the USB...
CVE-2016-6373
The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...