-
An exploitable command injection vulnerability exists in the gplotMakeOutputfunction of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitra…
ghost updated
5 years ago
-
This issue has been generated on-behalf of Mik317 (https://huntr.dev/app/users/Mik317)
## Vulnerability Description
Affected versions execute arbitrary commands remotely inside the victim's PC. The …
-
Snyk found a vulnerability in this repo that allows for command injection, so it is high severity.
Unfortunately, there isn't an immediately PR-able fix for it via Snyk so more investigation on our…
-
## Environment data
I used Fortify_SCA 22.2.2 to scan vscode-csharp 1.23.11
## Scan results
Sink Location: src/features/processPicker.ts:504
Code Snippet:
// Execute the process with prop…
-
Tracking issue for:
- [ ] https://github.com/itkaa/webgoat/security/code-scanning/1113
itkaa updated
6 months ago
-
I identified the possibility of injecting commands when calling the EXPORT method due to the bulkExportFn function using the shell_exec call concatenating the value of $consul without any sanitization…
-
put following command line in chat window;
/docker pull ;xxxx
xxxx can be executed in dockercraft server side.
-
Key points:
- PDFKit exploit --> https://www.exploit-db.com/exploits/51293 (pdfkit v0.8.7.2 - Command Injection)
- [PE] ruby -->https://gtfobins.github.io/gtfobins/ruby/#sudo
-
**`Severity Threshold: 🔵 MEDIUM`**
# 16 Potential vulnerability sources found within this repo
| `🔴 CRITICAL` | `🟡 HIGH` | `🔵 MEDIUM` | `⚪ LOW` |
|-|-|-|-|
| 0 | 0 | 16 | 0 |
**`ID: 01J4R31H3PD992…
-
i'm using linux/http/opentsdb_key_cmd_injection exploit
i set every option it wants: RHOSTS, LHOST, set the target, but the `show payloads` command returns nothing.