3627 matches found
Malicious Package
Overview jito-prop-exec is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990367)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990367 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990131)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990131 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989308)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989308 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix lockup on kernel exec fault The powerpc kernel is not prepared to handle exec...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989158)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989158 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: khugepaged: skip huge page collapse for special files The read-only THP for filesystems will...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989913)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989913 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: In several other...
Figma Developer MCP < 0.6.3 RCE (GHSA-gxw4-4fc5-9gr5)
The remote host has a version of figma-developer-mcp prior to 0.6.3. A command injection vulnerability exists in the figma-developer-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary...
EUVD-2022-54962
In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: "In several other operating systems, it is a hard requirement that the second argument to execve2 be the name of a program, thus prohibiting a scenario...
CVE-2025-34514: Improper Neutralization of Special Elements used in an OS Command
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scripts that call exec and allow an authenticated attacker to execute arbitrary commands. Ilevia has declined to service this vulnerability, and...
EUVD-2025-34079
tracexec has env command argument injection via environment variables starting with dash in traced exec events...
PT-2025-46641
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/xe/guc subsystem. Specifically, the issue relates to the handling of exec queue deregistration when the GuC Graphics Unit Controller is no...
EUVD-2007-4154
Malware in sbrugna...
EUVD-2007-1133
Malware in sbrugna...
EUVD-2003-0392
Malware in sbrugna...
EUVD-2002-2422
Malware in sbrugna...
EUVD-2013-4433
Malware in sbrugna...
EUVD-2020-14766
Malware in sbrugna...
EUVD-2021-14614
Malware in sbrugna...