Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2021/05/17 9:00 p.m.•71 views

OS Command Injection in wifiscanner

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS4.1AI score0.02533EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2020/06/29 5:15 p.m.•16 views

CVE-2020-15362

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS7.8AI score
SaveExploits0References1
NVD
NVD
•added 2020/06/29 5:15 p.m.•27 views

CVE-2020-15362

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS0.02533EPSS
SaveExploits1References1
Prion
Prion
•added 2020/06/29 5:15 p.m.•23 views

Code injection

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

7.5CVSS9.8AI score0.02533EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/06/29 4:12 p.m.•77 views

CVE-2020-15362

CVE-2020-15362 affects thingsSDK WiFi Scanner 1.0.1. The wifiscanner.js component allows Code Injection by accepting options that overwrite the default executable/binary path and its arguments, enabling arbitrary code execution. Root cause: insecure handling/override of executable path and argume...

9.8CVSS9.8AI score0.02533EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/29 12:00 a.m.•5 views

CVE-2020-15362: Improper Neutralization of Special Elements used in an OS Command

wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code...

9.8CVSS6.6AI score0.02533EPSS
SaveExploits1References2
Rows per page
Query Builder