9 matches found
3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1679 more potentially affected by CVE-2026-18149 via undici (>=8.0.0, <=8.10.1)
undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...
CVE-2026-18149
creationtimestamp| type| source ---|---|--- 2026-09-04 17:24:08+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mupi6ljdq22w 2026-09-29 23:30:32+00:00| seen| https://gist.github.com/alon710/7e27dd642f9867b84b33f236871de4c5 2026-09-30 12:01:15+00:00| seen|...
@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.1.0-dev.260119.0a66443, <=0.3.0) +1522 more potentially affected by CVE-2026-18149 via undici (>=7.11.0, <=7.29.0)
undici NPM version =7.11.0, =0.1.1, =0.1.0-dev.260119.0a66443, =0.6.0, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.12.0-alpha.1, =0.1.0, =0.1.0-beta.4, =0.18.1, =0.18.4, =0.18.4, =0.1.0, =0.1.1 and more Source cves: CVE-2026-18149 Source advisory: MEND:CVE-2026-18149...
3xhaustpi (>=0.1.3, <=0.2.5), @0x0.bug/pi-coding-agent (>=1.0.0, <=1.0.9) +1679 more potentially affected by CVE-2026-18149 via undici (>=8.0.0, <=8.10.1)
undici NPM version =8.0.0, =0.1.3, =1.0.0, =0.1.0, =0.3.5, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =5.0.1-staging.daf8e165bc4a -...
AlmaLinux 9 : .NET 8.0 (ALSA-2025:18149)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18149 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial of...
RockyLinux 9 : .NET 8.0 (RLSA-2025:18149)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:18149 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial o...
RHEL 9 : .NET 8.0 (RHSA-2025:18149)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:18149 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
PmWiki pagelist.php Remote PHP Code Injection Exploit
This module exploits an arbitrary command execution vulnerability in PmWiki from 2.0.0 to 2.2.34. The vulnerable function is inside /scripts/pagelist.php. Module Options msf use exploit/multi/http/pmwiki/pagelist msf undefinedpagelist show actions ...actions... msf undefinedpagelist set ACTION ms...
