pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

CLEANSTART-2023-BD43184 implementations of EAP-pwd in hostapd before 2

Security vulnerability affects the hostapd package. The implementations of EAP-pwd in hostapd before 2...

CLEANSTART-2024-VH26105 implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit

Security vulnerability affects the wpasupplicant package. The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit...

CVE-2001-0934

CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...

PCMan FTP Server 2.0 PWD Command Buffer Overflow

PCMan FTP Server version 2.0 contains a buffer overflow in the PWD command that allows remote attackers to execute arbitrary code. This Metasploit module sends a crafted FTP PWD request to demonstrate the issue. https://packetstorm.news/download/236498...

PT-2026-120150

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink set root pwd of the file /mnt/mtd/aoni ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

Exploit for CVE-2024-58299

Description This pull request addresses a security vulnerabil...

Rocky Linux 8 [CIQ] Security Update: freeradius / freeradius-debuginfo / freeradius-debugsource / etc (crlsa-2020_4799)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204799 advisory. freeradius: eap-pwd: DoS issues due to multithreaded BNCTX access CVE-2019-17185 Tenable has extracted the preceding description block directly from the CIQ securit...

PT-2026-102398

A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This affects an unknown part of the file /api/ZRnetwork/firstSetup wifi. Executing a manipulation of the argument login pwd can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001736 advisory. The implementations of EAP-PWD in hostapd EAP Server and wpasupplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability m...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freeradius (UTSA-2026-090267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090267 advisory. In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001735 advisory. The EAP-pwd implementation in hostapd EAP server before 2.8 and wpasupplicant EAP peer before 2.8 does not validate fragmentation reassembly state properly for a cas...

Unity Linux 20.1060e / 20.1070e Security Update: wpa_supplicant (UTSA-2021-001733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2021-001733 advisory. The implementations of EAP-PWD in wpasupplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freeradius (UTSA-2026-090227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090227 advisory. In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the huntin...

CVE-2026-85137 SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection

A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacmslocoynews.php of the component Locoy Collector. The manipulation of the argument pwd leads to code injection. The attack may be initiated remotely. The exploit has been disclosed...

CVE-2026-85137 SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection

A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacmslocoynews.php of the component Locoy Collector. The manipulation of the argument pwd leads to code injection. The attack may be initiated remotely. The exploit has been disclosed...

PT-2026-68103

Name of the Vulnerable Software and Affected Versions Miantang/IoT-PHP affected versions not specified Description The index.php file implements a POST '/userlogin' endpoint that is susceptible to SQL injection. The application reads the password from the pwd variable without sanitization and...

PowerShell Kitty Agent (typed tasks)

PowerShell HTTP polling agent with typed tasks shell/ls/pwd/whoami/cat/download/upload for listeners/multi/reversehttppolling from kittysploit import import base64 from lib.c2.beaconprofile import BeaconProfile from lib.c2.powershellhttppolling import buildpowershellhttppollingscript class...

Malicious code in formatters.ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21827129edc8dbde114c615df656d5a234d1fbcfa5b9f63d5286d781253e8f2b The package declares a preinstall hook that runs index.js on npm install. index.js collects host and identity reconnaissance — os.hostname,...

CVE-2026-11530: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in imvks786 studentmanagementsystem up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. This affects an unknown function of the file /index.ph of the component Login. Such manipulation of the argument usr/pwd leads to sql injection. The attack can be executed remotely...