10 matches found
CVE-2024-29435
An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter...
CVE-2024-29435: Improper Neutralization of Special Elements used in a Command
An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter...
CVE-2024-29435
An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter...
PT-2024-22895 · Alldata · Alldata
Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: An issue in Alldata allows an attacker to run arbitrary commands via the processId parameter. Recommendations: For Alldata version 0.4.6, avoid using the processId parameter until a fix is available. As a...
CVE-2024-29435
An issue in Alldata v0.4.6 allows an attacker to execute arbitrary commands via the processId parameter. This vulnerability stems from the improper neutralization of special elements used in a command. As a workaround, it is recommended to avoid using the processId parameter until a fix is availa...
CVE-2023-7116: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection...
Microsoft Windows SRV2.SYS SMB Negotiate ProcessID Function Table Dereference (MS09-050)
No description provided by source. Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista SP2/SP1 only, should be reliable! Tested on: Vista sp2...
Microsoft Windows - srv2.sys SMB Negotiate ProcessID Function Table Dereference (MS09-050)
Microsoft Windows - srv2.sys SMB Negotiate ProcessID Function Table Dereference MS09-050 Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista...
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050)
Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista SP2/SP1 only, should be reliable! Tested on: Vista sp2 6.0.6002.18005 Vista sp1 ultimate...
DESlock+ <= 3.2.6 (list) Local Kernel Memory Leak PoC
No description provided by source. / deslock-list-leak.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel mem leak POC by mu-b - Fri 21 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26 kernel pool memory leak by continually allocating link list structures and never freeing them. Th...