CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd 认证绕过 CVE: CVE-2026-24061 严重性: 严重 Critical CVSS: 9.8 严重 CWE: CWE-88 — 命令中参数分隔符的不当中和 受影响组件: GNU Inetutils telnetd 受影响版本: 1.9.3 至 2.7 概述 CVE-2026-24061 是 GNU Inetutils 提供的 Telnet 服务器实现中的一个严重认证绕过漏洞。 该漏洞源于在启用 Telnet 自动登录功能时，对客户端控制的 USER 环境变量验证不足。恶意值可能被解释为系统 login...

CVE-2020-27976

osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the sendmail -f option...

CVE-2015-1345

The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...

CVE-2015-1345

The bmexectrans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service out-of-bounds heap read and crash via crafted input when using the -F option...

clamav shell characters

Shell characters problem in filename if f option is used...

DEBIAN-CVE-2002-1896

Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long 1 -f or 2 -o command line argument...