PYSEC-2023-116

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

Command injection

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

Design/Logic Flaw

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

Spring Cloud 3.2.2 - Remote Command Execution Exploit

Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

PT-2023-26061 · Unknown · Websiteguide

Name of the Vulnerable Software and Affected Versions: WebsiteGuide version 0.2 Description: The issue allows for Remote Command Execution RCE via image upload. Recommendations: For version 0.2, at the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

Spring Cloud 3.2.2 - Remote Command Execution (RCE)

Exploit Title: Spring Cloud 3.2.2 - Remote Command Execution RCE Date: 07/07/2023 Exploit Author: GatoGamer1155, 0bfxgh0st Vendor Homepage: https://spring.io/projects/spring-cloud-function/ Description: Exploit to execute commands exploiting CVE-2022-22963 Software Link:...

PT-2023-26064 · Xalpha · Xalpha

Name of the Vulnerable Software and Affected Versions: xalpha version 0.11.4 Description: The issue concerns Remote Command Execution RCE due to improper validation of user input, which is not checked to ensure it contains numerical values before being evaluated. Recommendations: For xalpha versi...

CVE-2023-37659: Improper Control of Generation of Code

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37659

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37659

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

xalpha code injection vulnerability

xalpha is the full process management of a fund investment by Shixin Zhang, an individual developer in China. A security vulnerability exists in xalpha version v0.11.4, which stems from vulnerability to Remote Command Execution RCE attacks...

CVE-2023-37659

xalpha v0.11.4 is vulnerable to Remote Command Execution RCE...

CVE-2023-37656

CVE-2023-37656 affects WebsiteGuide v0.2. The vulnerability is Remote Command Execution (RCE) via image upload, with a high-severity CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The Connected documents provide no explicit remediation steps or patched versions. There is no de...

CVE-2023-37656: Unrestricted Upload of File with Dangerous Type

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

WebsiteGuide Code Issues and Vulnerabilities

WebsiteGuide is a web site navigation system. A security vulnerability exists in WebsiteGuide v0.2 that stems from vulnerability to Remote Command Execution RCE attacks via image upload...