Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2021/05/17 9:00 p.m.•78 views

OS Command Injection in wifiscanner

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS4.1AI score0.02533EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2020/06/29 4:12 p.m.•5 views

CVE-2020-15362

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS0.02533EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/29 12:00 a.m.•10 views

CVE-2020-15362: Improper Neutralization of Special Elements used in an OS Command

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS6.6AI score0.02533EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/06/29 12:00 a.m.•5 views

PT-2020-14390

Name of the Vulnerable Software and Affected Versions thingsSDK WiFi Scanner version 1.0.1 Description The issue allows code injection because the wifiscanner.js component can be used with options to overwrite the default executable/binary path and its arguments, enabling an attacker to execute...

9.8CVSS0.02533EPSS
SaveExploits1References4
Rows per page
Query Builder