yukiNeko114514

3 exploits Active since Jun 2020
CVE-2020-15778 NOMISEC HIGH WORKING POC
Openbsd Openssh < 8.3 - OS Command Injection
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
37 stars
CVSS 7.4
CVE-2020-9483 NOMISEC HIGH WORKING POC
Apache Skywalking < 6.6.0 - SQL Injection
**Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability, which allows to access unpexcted data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to set SQL parameters.
5 stars
CVSS 7.5
CVE-2020-15778 INTHEWILD HIGH WORKING POC
Openbsd Openssh < 8.3 - OS Command Injection
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVSS 7.4