Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2021-46007: CVE-2021-46007 - HackMD

totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the “ping” command, and the input field does not adequately filter special symbols. This can lead to command injection attacks.

CVE
#google#git

HackMD

    • Create new note
    • Create a note from template
    • Options
    • Versions and GitHub Sync
    • Transfer ownership
    • Delete this note
    • Template
    • Save as template
    • Insert from template
    • Export
    • Dropbox
    • Google Drive
    • Gist
    • Import
    • Dropbox
    • Google Drive
    • Gist
    • Clipboard
    • Download
    • Markdown
    • HTML
    • Raw HTML
    • ODF (Beta)
    • Sharing

    • View mode

      • Edit mode
      • View mode
      • Book mode
      • Slide mode
    • Note Permission

    • Read

      • Owners
      • Signed-in users
      • Everyone
    • Write

      • Owners
      • Signed-in users
      • Everyone
    • More (Comment, Invitee)

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907