Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2020-7597 | codecov-node up to 3.6.4 on npm Incomplete Fix CVE-2020-7596 lib/codecov.js exec gcov-root os command injection


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in codecov-node up to 3.6.4 on npm and classified as critical. Affected by this issue is the function exec in the library lib/codecov.js of the component Incomplete Fix CVE-2020-7596. The manipulation of the argument gcov-root as part of Argument leads to os command injection. This vulnerability is handled as CVE-2020-7597. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ codecov Package up to 3.7.0 on npm Upload os command injection


📈 39.3 Punkte
🕵️ Sicherheitslücken

🐧 On trusting NPM: Early in the month, Lance R. Vick noticed that the maintainer of the NPM foreach package let their personal email domain expire, so they bought it and now “controls foreach on NPM and the 36,826 projects that depend on it”.


📈 36.01 Punkte
🐧 Linux Tipps

🔧 Gcov in MariaDB


📈 35.79 Punkte
🔧 Programmierung

🕵️ Leptonica up to 1.75.3 Incomplete Fix CVE-2018-3836 gplotMakeOutput $(command) command injection


📈 34.98 Punkte
🕵️ Sicherheitslücken

🕵️ Cockpit up to 0.4.4 Incomplete Fix CVE-2017-14611 /assets/lib/fuc.js.php url Server-Side Request Forgery


📈 32.02 Punkte
🕵️ Sicherheitslücken

🕵️ OpenJPEG 2.2.0 Incomplete Fix lib/openjp2/j2k.c opj_j2k_write_sot Pufferüberlauf


📈 31.44 Punkte
🕵️ Sicherheitslücken

🕵️ OpenJPEG 2.2.0 Incomplete Fix lib/openjp2/j2k.c opj_j2k_write_sot memory corruption


📈 31.44 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-0935 | DolphinPHP up to 1.5.1 Incomplete Fix CVE-2021-46097 common.php id os command injection


📈 30.05 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: NUUO NVRmini Products CVE-2018-15716 Incomplete Fix Remote Command Injection Vulnerability


📈 29.48 Punkte
🕵️ Sicherheitslücken

🔧 Fix: Python312\Lib\site-packages\torch\lib\fbgemm.dll


📈 28.59 Punkte
🔧 Programmierung

🕵️ HomeAutomation 3.3.2 Custom Command Plugin customcommand.plugin.php exec set_command_on/set_command_off os command injection


📈 27.71 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-2199 | PhpConcept Library lib/pcltar.lib.php g_pcltar_lib_dir code injection (XFDB-33837 / EDB-3781)


📈 27 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Ansible CVE-2017-7466 Incomplete Fix Arbitrary Command Execution Vulnerability


📈 26.03 Punkte
🕵️ Sicherheitslücken

🕵️ Leptonica bis 1.75.3 Incomplete Fix CVE-2018-3836 gplotMakeOutput $(command) erweiterte Rechte


📈 26.03 Punkte
🕵️ Sicherheitslücken

🕵️ Andreas Gohr DokuWiki prior Release 2006-03-09e lib/exec/fetch.php denial of service


📈 24.75 Punkte
🕵️ Sicherheitslücken

🕵️ Andreas Gohr DokuWiki prior Release 2006-03-09e lib/exec/fetch.php privilege escalation


📈 24.75 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-20059 | MFScripts YetiShare up to 4.5.4 Incomplete Fix CVE-2019-19732 payment_manage.ajax.php sSortDir_0 sql injection


📈 24.55 Punkte
🕵️ Sicherheitslücken

💾 FusionPBX Command exec.php Command Execution


📈 24.26 Punkte
💾 IT Security Tools

⚠️ FusionPBX Command exec.php Command Execution


📈 24.26 Punkte
⚠️ PoC

⚠️ #0daytoday #FusionPBX Command (exec.php) Command Execution Exploit #RCE [remote #exploits #0day #Exploit]


📈 24.26 Punkte
⚠️ PoC

🔧 Simplifying Your Workflow: npm run vs npm --run


📈 24.01 Punkte
🔧 Programmierung

🔧 npm : File C:\Program Files\nodejs\npm.ps1 cannot be loaded because running scripts is disabled on this system.


📈 24.01 Punkte
🔧 Programmierung

🔧 Solving the NPM "Can't Find Path `npm`" Error on Windows


📈 24.01 Punkte
🔧 Programmierung

🔧 npm toggle-beautify | my first npm package


📈 24.01 Punkte
🔧 Programmierung

🕵️ Vuln: Red Hat JBoss BRMS and BPM Suite CVE-2016-8608 Incomplete Fix HTML Injection Vulnerability


📈 23.98 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Red Hat JBoss BRMS and BPM Suite CVE-2016-8608 Incomplete Fix HTML Injection Vulnerability


📈 23.98 Punkte
🕵️ Sicherheitslücken

🕵️ Logitech Unifying Devices Incomplete Fix CVE-2016-10761 Key Combination Injection weak encryption


📈 23.98 Punkte
🕵️ Sicherheitslücken

🕵️ IBM WebSphere MQ up to 9.1.1 Incomplete Fix CVE-2018-1792 Code Injection privilege escalation


📈 23.98 Punkte
🕵️ Sicherheitslücken

🕵️ WP Super Cache Plugin up to 1.7.2 on WordPress Incomplete Fix CVE-2021-24209 code injection


📈 23.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-16254 | Ruby up to 2.4.7/2.5.6/2.6.4 Incomplete Fix HTTP Response injection (DLA 2027-1)


📈 23.98 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-5472 | PHPLibrary lib/sqlcompose.lib.php lib_dir memory corruption (XFDB-29490 / EDB-2520)


📈 23.55 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2006-5472 | Softerra PHP Developer Library up to 1.5.3 lib/registry.lib.php lib_dir file inclusion (EDB-2520 / XFDB-29490)


📈 23.55 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2007-2660 | CJG EXPLORER PRO up to 3.3 lib/pcltrace.lib.php g_pcltar_lib_dir file inclusion (EDB-3915 / XFDB-34273)


📈 23.55 Punkte
🕵️ Sicherheitslücken

🕵️ ecstatic npm bis 1.x Regular Expression lib/ecstatic.js Denial of Service


📈 23.49 Punkte
🕵️ Sicherheitslücken

📰 Check your repos... Crypto-coin-stealing code sneaks into fairly popular NPM lib (2m downloads per week)


📈 23.49 Punkte
📰 IT Security Nachrichten

matomo
•