33 matches found
Command injection
The package simple-git before 3.3.0 are vulnerable to Command Injection via argument injection. When calling the .fetchremote, branch, handlerFn function, both the remote and branch parameters are passed to the git fetch subcommand. By injecting some git options it was possible to get arbitrary...
Command Injection
Overview git is a Ruby library that can be used to create, read and manipulate Git repositories by wrapping system calls to the git binary. Affected versions of this package are vulnerable to Command Injection via git argument injection. When calling the fetchremote = 'origin', opts = function, t...
Command Injection
Overview workspace-tools is a JS Monorepo Workspace Tools. Affected versions of this package are vulnerable to Command Injection via git argument injection. When calling the fetchRemoteBranchremote: string, remoteBranch: string, cwd: string function, both the remote and remoteBranch parameters ar...
PT-2021-9144
Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 10.4 Description An issue was discovered in ownCloud due to a Server-Side Request Forgery SSRF problem via the apps/files sharing/external remote parameter. This allows an authenticated attacker to interact with loca...
(0Day) Horde Groupware Webmail Edition Remote Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Horde Groupware Webmail Edition. Authentication is required to exploit this vulnerability. The specific flaw exists within Remote.php. When parsing the remote parameter, the process does not properly...
Cisco Webex Meetings and Webex Meetings Server Input Validation Error Vulnerability
Cisco WebEx Meetings Server CWMS and Cisco Webex Meetings are both products of Cisco Cisco, U.S.A. Cisco WebEx Meetings Server is a multi-functional conferencing solution that includes audio, video, and Web conferencing in the WebEx Meetings program. Cisco Webex Meetings is a video conferencing...
CVE-2018-10363
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices...
OCaml Batteries Included Parameter Injection Vulnerability
OCaml Batteries Included a.k.a. ocaml-batteries is a set of development platforms based on the OCaml language maintained by the OCaml community. A security vulnerability exists in the batteriesConfig.mlp file in OCaml Batteries Included version 2.6, which stems from the program failing to validat...
Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
Try this: chromehtml:"20--renderer-path="calc"20--no-sandbox Disabling sandbox does matter : Tested with Google Chrome Chrome 1.0.154.46 on Win XP/Vista and IE6/IE7 and it works ... Full PoC: htmlheadtitleChrome URI Handler Remote Command Execution PoC/title/head body h3This is a test/h3 iframe...
Google Chrome Browser (ChromeHTML://) Remote Parameter Injection
No description provided by source. !-- Google Chrome Browser ChromeHTML:// remote parameter injection POC by Nine:Situations:Group::bellick&strawdog Site: http://retrogod.altervista.org/ tested against: Internet Explorer 8 beta 2, Google Chrome 1.0.154.36, Microsoft Windows XP SP3 List of command...
Google Chrome - ChromeHTML: Remote Parameter Injection
Google Chrome - ChromeHTML: Remote Parameter Injection click me milw0rm.com 2008-12-23...
Google Chrome Browser (ChromeHTML://) Remote Parameter Injection
Exploit for unknown platform in category remote exploits ================================================================ Google Chrome Browser ChromeHTML:// Remote Parameter Injection ================================================================ 0day.today 2018-03-01...
