4172 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989158)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989158 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: khugepaged: skip huge page collapse for special files The read-only THP for filesystems will...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990367)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990367 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989913)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989913 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: In several other...
Figma Developer MCP < 0.6.3 RCE (GHSA-gxw4-4fc5-9gr5)
The remote host has a version of figma-developer-mcp prior to 0.6.3. A command injection vulnerability exists in the figma-developer-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary...
EUVD-2022-54962
In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: "In several other operating systems, it is a hard requirement that the second argument to execve2 be the name of a program, thus prohibiting a scenario...
CVE-2025-34514: Improper Neutralization of Special Elements used in an OS Command
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scripts that call exec and allow an authenticated attacker to execute arbitrary commands. Ilevia has declined to service this vulnerability, and...
PT-2025-42502
Name of the Vulnerable Software and Affected Versions Ilevia EVE X1 Server firmware versions through 4.7.18.0.eden Description The software contains authenticated OS command injection flaws in several web-accessible PHP scripts. These scripts utilize the exec function, enabling a verified attacke...
EUVD-2025-34079
tracexec has env command argument injection via environment variables starting with dash in traced exec events...
PT-2025-46641
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/xe/guc subsystem. Specifically, the issue relates to the handling of exec queue deregistration when the GuC Graphics Unit Controller is no...
EUVD-1999-0548
Malware in sbrugna...
EUVD-2011-3440
Malware in sbrugna...
EUVD-2013-4529
Malware in sbrugna...
EUVD-2005-4772
Malware in sbrugna...
EUVD-2013-0925
Malware in sbrugna...
EUVD-2021-25728
Malware in sbrugna...
EUVD-2021-25729
Malware in sbrugna...
EUVD-2021-14615
Malware in sbrugna...
EUVD-2021-0746
Malware in sbrugna...