Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
luci/applications
History
Jo-Philipp Wich 9df7ea4d66 luci-app-ddns: fix multiple authenticated RCEs 
The ddns detail model passes unsanitized values directly to sys.call() in
various places, which allows injecting arbitrary commands through a number
of fields.

Prevent that issue by quoting the values used in command invocations.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-02-17 18:18:14 +01:00
..
luci-app-adblock treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-advanced-reboot treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-ahcp treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-aria2 treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-attendedsysupgrade treewide: Backport and sync translations 2020-12-19 11:54:47 +02:00
luci-app-banip treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-bcp38 treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-bmx7 treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-clamav treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-commands treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-coovachilli treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-cshark treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-dawn/root/usr/share/rpcd/acl.d treewide: stage ACL rules for legacy applications 2020-05-19 12:38:17 +02:00
luci-app-dcwapd treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-ddns luci-app-ddns: fix multiple authenticated RCEs 2021-02-17 18:18:14 +01:00
luci-app-diag-core treewide: switch to bcp47 language codes 2020-01-29 13:42:14 +01:00
luci-app-dnscrypt-proxy treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-dump1090 treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-dynapoint treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-e2guardian treewide: move server side CBI support to luci-compat 2019-11-03 20:49:31 +01:00
luci-app-firewall treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-fwknopd treewide: i18n - backport translations from master 2021-01-16 11:10:09 +02:00
luci-app-hd-idle treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-https-dns-proxy treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-ksmbd treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-ltqtapi treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-lxc treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-minidlna treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-mjpg-streamer treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-mosquitto mosquitto: support notifications_local_only flag 2020-09-08 10:52:17 +00:00
luci-app-mwan3 treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-nextdns treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-nft-qos treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-nlbwmon treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-ntpc treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-nut treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-ocserv treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-olsr treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-olsr-services treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-olsr-viz treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-openvpn treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-opkg treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-p910nd treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-pagekitec treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-polipo treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-privoxy treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-qos treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-radicale treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-radicale2 treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-rosy-file-server treewide: stage ACL rules for legacy applications 2020-05-19 12:38:17 +02:00
luci-app-rp-pppoe-server treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-samba treewide: stage ACL rules for legacy applications 2020-05-19 12:38:17 +02:00
luci-app-samba4 treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-shadowsocks-libev treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-shairplay treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-siitwizard treewide: move server side CBI support to luci-compat 2019-11-03 20:49:31 +01:00
luci-app-simple-adblock treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-snmpd treewide: stage ACL rules for legacy applications 2020-05-19 12:38:17 +02:00
luci-app-splash treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-squid treewide: i18n - Sync and backport translations from master 2021-01-29 20:57:29 +02:00
luci-app-statistics treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-tinyproxy treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-transmission treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-travelmate treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-ttyd treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-udpxy treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-uhttpd treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-unbound treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-upnp treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-vnstat treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-vpn-policy-routing treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-vpnbypass treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-watchcat treewide: i18n - backport translations from master 2021-01-16 11:10:09 +02:00
luci-app-wifischedule treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-wireguard treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00
luci-app-wol treewide: i18n backport and sync translations 2021-02-13 10:33:55 +02:00