CVE-2020-18917

The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control...

The vulnerability of the Brackets text editor, related to the lack of measures taken at the control level to clean up data, allows attackers to execute arbitrary commands.

The vulnerability of the Brackets text editor is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system remotely...

CVE-2021-39151

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

Design/Logic Flaw

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream, if using the version out of the box with Java runtime...

The vulnerability of the Universal Plug-and-Play service of the Cisco RV110W Wireless-N VPN Firewall, as well as the Cisco RV130 VPN Routers, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Routers, allows a intruder to execute arbitrary code.

The vulnerability of the Universal Plug-and-Play UPnP network interface layer of the Cisco RV110W Wireless-N VPN Firewall, the Cisco RV130 VPN Routers, the Cisco RV130W Wireless-N Multifunction VPN Router, and the Cisco RV215W Wireless-N VPN Router is due to a buffer overflow in the stack...

CVE-2021-39144

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

x-scan

This is a vulnerability scanner framework written in Python, specifically designed for scanning web applications. The framework is called "X Vulnerability Scanner Framework" and is maintained by "BaCde". The code is organized into several modules, each responsible for a specific type of...

CVE-2021-21825

A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-37608

CVE-2021-37608 affects Apache OFBiz up to and including 17.12.07; it is caused by Unrestricted Upload of File with Dangerous Type, enabling remote command execution. The advisory calls for upgrading to at least 17.12.08 or applying the OFBIZ-12297 patch. Connected sources confirm the vulnerabilit...

The vulnerability of the users.queries.php component of the TeamPass password manager allows a hacker to execute arbitrary SQL commands.

The vulnerability of the users.queries.php component of the TeamPass password manager is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL commands...

The vulnerability of the Adobe Photoshop graphic editor lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Remote Desktop Client for Microsoft Windows operating systems relates to operations that go beyond the buffer limits in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Microsoft Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Quokka XML External Entity Injection Vulnerability

Quokka is a content management framework written in Python. quokka version 0.4.0 is vulnerable to XML external entity injection. A remote attacker can exploit this vulnerability to execute arbitrary code via the quokka/core/content/views.py component...

VulnCheck KEV: CVE-2008-2551

The DownloaderActiveX Control DownloaderActiveX.ocx in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."...

Exploit for CVE-2021-38817

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remot...

CVE-2021-20509

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243...

CVE-2021-20509

CVE-2021-20509 affects IBM Maximo Asset Management core product versions 7.6.0.x and 7.6.1.x. Root cause: improper validation of CSV file contents, enabling CSV Injection that could allow a remote attacker to execute arbitrary commands on the system. Remediation: IBM’s bulletin provides fixes (In...

CVE-2021-32943

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1...

SAP ERP 代码注入漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. SAP ERP suffers from a code injection vulnerability that allows an attacker to bypass security policies and remotely execute arbitrary code...

PT-2021-3904 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Print Spooler of Windows operating systems. It allows a remote attacker to execute arbitrary code...