5659 matches found
CVE-2013-2512
The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...
CVE-2013-2512
The CVE-2013-2512 entry concerns the ftpd gem for Ruby (version 0.2.1). Affected component: the FTP command handling (LIST/NLST) that accepts arguments containing shell metacharacters. Root cause: improper sanitization allows remote attackers to execute arbitrary OS commands through crafted FTP t...
CVE-2021-3190
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...
CVE-2021-3190
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...
Command injection
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...
CVE-2020-35576
A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...
Omrilotan async-git OS Command Injection Vulnerability
Omrilotan async-git is a Javascript-based codebase from the individual developers of Omrilotan that supports interaction with git repositories. Omrilotan async-git package before 1.13.2 contains an operating system command injection vulnerability that allows injection of operating system commands...
CVE-2013-2512: Improper Neutralization of Special Elements used in an OS Command
The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...
PT-2021-8374
Name of the Vulnerable Software and Affected Versions ftpd gem version 0.2.1 Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic. Recommendations For ftpd gem version 0.2.1, consider...
CVE-2020-35576
A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...
CVE-2020-35576: Improper Neutralization of Special Elements used in an OS Command
A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...
Command Injection
Overview async-git is a 👾 Retrieve data from current git repository Affected versions of this package are vulnerable to Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. POC git.reset'; touch HACKED '; // file "HACKED" was created git.tag'; touch HACKED '; //...
EUVD-2021-0493
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...
CVE-2021-3190
The CVE-2021-3190 issue affects the Node.js package async-git prior to 1.13.2, where OS Command Injection via shell metacharacters (demonstrated by git.reset and git.tag) is possible. The vulnerability may enable remote code execution in vulnerable environments. A remediation is to upgrade async-...
CVE-2021-3190
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag...
Exploit for OS Command Injection in Linksys Re6500_Firmware
Description Belkin LINKSYS RE6500 devices before 1.0.012.001...
VulnCheck KEV: CVE-2020-35665
An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creation...
CVE-2021-3029
EVOLUCARE ECSIMAGING aka ECS Imaging through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulation. The parameter "file" on the webpage /showfile.php can be exploited to gain root access. NOTE: This vulnerability only affects products that are no longer...
Command injection
UNSUPPORTED WHEN ASSIGNED EVOLUCARE ECSIMAGING aka ECS Imaging through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulation. The parameter "file" on the webpage /showfile.php can be exploited to gain root access. NOTE: This vulnerability only affects...