Search Vulnerabilities

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Inter...

Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface

NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options

sysPass 3.2.11 Authenticated OS Command Injection via Backup Path

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Iron...

9router before 0.4.60 Remote Code Execution via default password

localstack serverless-localstack Configuration index.js os command injection

DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

Remote Code Execution

release-it conventional-changelog Changelog File index.js writeChangelog os command injection

bahmutov find-cypress-specs Branch index.js shell.exec os command injection

Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update

publint package-manager pack.js child_process.exec os command injection

syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection

danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection

oclif JIT Plugin Entry child_process.exec os command injection

Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execut...

Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings