Command Injection

chrometabs plugin is vulnerable to Command Injection. The vulnerability is due to improper neutralization of a SQL-controlled URL value before it is embedded into an AppleScript template and executed via osascript, which allows an authenticated attacker with local CLI access to inject arbitrary...

PT-2019-16650

Name of the Vulnerable Software and Affected Versions Lifesize Icon version 3.7.0 2421 Description A Remote Code Execution issue in the DNS Query Web UI allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request. Recommendations...

CVE-2019-3702: Improper Neutralization of Special Elements used in an OS Command

A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LSRM33.7.0 2421 allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request...