CVE-2023-29805

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the prostorcanceltranshandlerpart19 function...

Command injection

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the syssmbpwdmod function...

Command injection

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the prostorcanceltranshandlerpart19 function...

CVE-2023-29804

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the syssmbpwdmod function...

CVE-2023-29804

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the syssmbpwdmod function...

I-O Data Device WFS-SR03 操作系统命令注入漏洞

I-O Data Device WFS-SR03 is a Wi-Fi storage for saving and playing photos and videos saved on cell phones and computers to SD cards, USB HDDs, etc. via Wi-Fi and USB from I-O Data Device, Japan. A security vulnerability exists in I-O Data Device WFS-SR03 v1.0.3, which was discovered to contain a...

CVE-2023-29805

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the prostorcanceltranshandlerpart19 function...

CVE-2023-29805

CVE-2023-29805 affects WFS-SR03 v1.0.3, with a reported command injection via the pro_stor_canceltrans_handler_part_19 function. The available documents confirm the vulnerable component and the underlying issue (command execution) but do not provide explicit exploit strings, affected software rev...

CVE-2023-29805

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the prostorcanceltranshandlerpart19 function...

CVE-2023-29804

WFS-SR03 v1.0.3 contains a command injection vulnerability in the sys_smb_pwdmod function. The CVE-2023-29804 entry (NVD/Red Hat entries) lists a high-severity issue (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) with network attack vector and no user interaction. Concrete affected software/com...

GHSA-7G5F-WRX8-5CCF GeoServer OGC Filter SQL Injection Vulnerabilities

Impact GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is also supported through the Web Coverage Service WCS protocol for ImageMosaic coverages. SQL Injection...

CVE-2023-25157 Unfiltered SQL Injection Vulnerabilities in Geoserver

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...

CVE-2023-25157 Unfiltered SQL Injection Vulnerabilities in Geoserver

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...

CVE-2023-25157

CVE-2023-25157 (GeoServer SQL Injection) is triggered by flaws in OGC Filter handling within GeoServer’s WFS/WMS/WCS inputs, enabling SQL injection via filters such as PropertyIsLike, strEndsWith, strStartsWith, jsonArrayContains, and FeatureId under certain datastore conditions. Public details c...

PT-2023-2269 · Geoserver · Geoserver

Name of the Vulnerable Software and Affected Versions: GeoServer versions prior to 2.21.4 GeoServer versions prior to 2.22.2 GeoServer versions prior to 2.20.7 GeoServer versions prior to 2.19.7 GeoServer versions prior to 2.18.7 Description: The issue is related to SQL injection vulnerabilities ...

WFS HEAVEN BURNS RED 安全漏洞

WFS HEAVEN BURNS RED is a game from WFS, Inc. A security vulnerability exists in WFS HEAVEN BURNS RED version 2.5.0 and earlier, which originates from a malicious program that could be elevated to SYSTEM privileges and run on the computer where the product is installed, resulting in system...

Malicious code in wfs-admin-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93934361025c4ab66cd9131da38e3a55de0c4c014c46beca4ae00035b86c8e14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wfs-lite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b68a3be380b0d140924d1d8f3e5bb5a834259149c1e0e08e8a2dcc3badabaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7129 Malicious code in wfs-lite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b68a3be380b0d140924d1d8f3e5bb5a834259149c1e0e08e8a2dcc3badabaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7128 Malicious code in wfs-admin-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93934361025c4ab66cd9131da38e3a55de0c4c014c46beca4ae00035b86c8e14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...