Most recent entries from all

EUVD-2026-158224

fkie_cve-2024-24899

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-zeus on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/aops-zeus/blob/master/zeus/conf/constant.Py.

This issue affects aops-zeus: from 1.2.0 through 1.4.0.

GHSA-5gv4-m6hr-96m6

This issue affects aops-zeus: from 1.2.0 through 1.4.0.

gsd-2024-24899

OESA-2024-1291 — aops-zeus security update

Affected: openEuler:22.03-LTS-SP3: aops-zeus

A host and user manager service which is the foundation of aops. Security Fix(es): In aops-zeus software versions 1.2.0~1.4.1, there is a vulnerability in the plugin management command of the zeus/conf/constant file. Through this vulnerability, an attacker can implant arbitrary commands to be executed on the remote host, which may cause the remote host system to crash, suffering serious consequences of security threats and losses.(CVE-2024-24899)