Taquito Command Execution Vulnerability

Taquito is ECAD open source a fast and lightweight TypeScript library . Taquito suffers from a command execution vulnerability that stems from not properly executing regular expression matches for authorized commands and parameters, which can be exploited by an attacker to execute unauthorized...

Permissive Regular Expression in tacquito

Impact The CVE is for a software vulnerability. Network admins who have deployed tacquito or versions of tacquito in their production environments and use tacquito to perform command authorization for network devices should be impacted. Tacquito code prior to commit...

GHSA-J42F-WC6V-5XPQ Duplicate Advisory: Permissive Regular Expression in tacquito

Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That...

Duplicate Advisory: Permissive Regular Expression in tacquito

Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That...

CVE-2024-49400

Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That...

CVE-2024-49400

Tacquito contains a Permissive Regular Expression vulnerability where the code prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 performed regex matches on authorized commands and arguments in a more permissive way, enforcing a substring rather than a full-string match. This could potentia...

CVE-2024-49400

Tacquito prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 was not properly performing regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to require a match on the entire string, but instead only enforced a match on a sub-string. That...

PT-2024-33511 · Tacquito · Tacquito

Name of the Vulnerable Software and Affected Versions: Tacquito versions prior to commit 07b49d1358e6ec0b5aa482fcd284f509191119e2 Description: The issue concerns the improper performance of regex matches on authorized commands and arguments. Configured allowed commands/arguments were intended to...

CVE-2024-9137 Moxa Service Missing Authentication for Critical Function

The affected product lacks an authentication check when sending commands to the server via the Moxa service. This vulnerability allows an attacker to execute specified commands, potentially leading to unauthorized downloads or uploads of configuration files and system compromise...

Code Injection

refuelautolabel is vulnerable to Code Injection. The vulnerability is due to improper handling of user-provided CSV files, where the eval function processes malicious code without validation, allowing an attacker to gain control of the system or execute unauthorized commands...

CVE-2024-7029 Command Injection in AVTech AVM1203 (IP Camera)

Commands can be injected over the network and executed without authentication...

SQL Injection

github.com/prest/prest is vulnerable to SQL Injection through the authentication mechanism. The vulnerability is due to improper input validation which allows an attacker to bypass security restrictions and execute unauthorized SQL commands by manipulating input...

Exploit for CVE-2024-34361

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE...

MOXA OnCell G3470A-LTE Command Injection Vulnerability

MOXA OnCell G3470A-LTE is a series of cellular gateway/router from MOXA China. A command injection vulnerability exists in MOXA OnCell G3470A-LTE v1.7.7 and earlier firmware versions, which stems from the lack of a neutralization input in the Web Key Upload function, and can be exploited by an...

MOXA OnCell G3470A-LTE Command Injection Vulnerability (CNVD-2024-41847)

MOXA OnCell G3470A-LTE is a series of cellular gateway/router from MOXA China. A command injection vulnerability exists in the MOXA OnCell G3470A-LTE v1.7.7 and earlier firmware versions, which stems from the lack of a neutralization input in the IPSec configuration, and can be exploited by an...

CVE-2024-5820

An unprotected WebSocket connection in the latest version of stitionai/devika commit ecee79f allows a malicious website to connect to the backend and issue commands on behalf of the user. The backend serves all listeners on the given socket, enabling any such malicious website to intercept all...

CVE-2024-4639

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands...

CVE-2024-4638

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized...

CVE-2024-4638

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in the web key upload function. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized...

CVE-2024-4638

CVE-2024-4638 affects MOXA OnCell G3470A-LTE Series (v1.7.7 and earlier). Root cause: web key upload input not neutralized, allowing an attacker to modify commands sent to target functions and potentially execute unauthorized commands. Reports consistently describe command injection risk without ...