CVE-2022-27947: Improper Neutralization of Special Elements used in an OS Command

NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands such as telnetd via shell metacharacters in the ipv6fix.cgi ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, or ipv6lanlength parameter...

NETGEAR R8500 操作系统命令注入漏洞

The NETGEAR R8500 is a wireless router from the American company Netgear. A security vulnerability exists in the NETGEAR R8500 that can be exploited to execute arbitrary commands e.g., telnetd via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters of adminaccount.cgi...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

UBUNTU-CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

PT-2022-18606 · Gnome +2 · Gnome Ocrfeeder +2

Name of the Vulnerable Software and Affected Versions: GNOME OCRFeeder versions prior to 0.8.4 Description: The issue allows OS command injection via shell metacharacters in a PDF or image filename. Recommendations: For versions prior to 0.8.4, update to version 0.8.4 or later to resolve the issu...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

CVE-2022-27811: Improper Neutralization of Special Elements used in an OS Command

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

Red Hat GNOME OCRFeeder 操作系统命令注入漏洞

Red Hat GNOME OCRFeeder is a document layout analysis and optical character recognition system from Red Hat, Inc. An operating system command injection vulnerability exists in Red Hat GNOME OCRFeeder prior to version 0.8.4, which stems from OCRFeeder allowing the injection of operating system...

CVE-2021-45966

An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters...

CVE-2021-45966

An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters...

Code injection

An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters...

PT-2022-12473

Name of the Vulnerable Software and Affected Versions Pascom Cloud Phone System versions prior to 7.20.x Description An issue was discovered in the management REST API, specifically at the "/services/apply" endpoint in exd.pl, allowing remote attackers to execute arbitrary code via shell...

CVE-2021-45966: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters...

CVE-2021-46319

Remote Code Execution RCE vulnerability exists in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.Th...

CVE-2021-46315

Remote Command Execution RCE vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters...

Remote code execution

Remote Code Execution RCE vulnerability exists in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.Th...

CVE-2021-46315

Remote Command Execution RCE vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters...

CVE-2021-46319: Improper Neutralization of Special Elements used in an OS Command

Remote Code Execution RCE vulnerability exists in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.Th...

PT-2022-1645

Name of the Vulnerable Software and Affected Versions D-Link DIR-846 versions DIR846A1 FW100A43.bin through DIR846enFW100A53DLA-Retail.bin Description The issue is related to insufficient argument checking in the firmware of D-Link DIR-846 routers, allowing remote attackers to execute arbitrary...