EUVD-2023-46857

Malicious code in bioql PyPI...

CVE-2023-42405

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

CVE-2023-42405

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

CVE-2023-42405

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

Sql injection

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

CVE-2023-42405

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

CVE-2023-42405: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

CVE-2023-42405

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

CVE-2023-42405

The CVE-2023-42405 issue affects FIT2CLOUD RackShift v1.7.1. It is a SQL injection vulnerability exposed via the sort parameter in the API endpoints taskService.list(), bareMetalService.list(), and switchService.list(), potentially allowing an attacker to execute arbitrary code. According to PT-S...

CVE-2023-42405

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

PT-2023-28330 · Fit2Cloud · Fit2Cloud Rackshift

Name of the Vulnerable Software and Affected Versions: FIT2CLOUD RackShift version 1.7.1 Description: The issue allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list API endpoints. This enables attackers to potentially...

CVE-2023-42405

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the sort parameter to taskService.list, bareMetalService.list, and switchService.list...

RackShift SQL Injection Vulnerability

RackShift is an open source bare metal server management platform that covers bare metal server discovery, out-of-band management, RAID configuration, firmware updates, operating system installation and more. A security vulnerability exists in RackShift v1.7.1 that allows an attacker to execute...