7 matches found
CVE-2026-8592
OS Command Injection vulnerability in the processstring action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline...
CVE-2026-8592: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in the processstring action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline...
EUVD-2024-53833
Malicious code in bioql PyPI...
The vulnerability of the process_string() function in the kernel/trace/traceevents.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the processstring function in the kernel/trace/traceevents.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-57930 tracing: Have process_string() also allow arrays
In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the processstring function in the tracing module not properly handling array references. This could lead to fals...
CVE-2024-57930: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...