RockyLinux 10 : cockpit-image-builder (RLSA-2026:24331)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:24331 advisory. lodash: prototype pollution in .unset and .omit functions CVE-2025-13465 lodash: lodash: Arbitrary code execution via untrusted input in template impor...

RHSA-2026:24331 Red Hat Security Advisory: cockpit-image-builder security update

Bulletin has no description...

CVE-2025-24331

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743 2025-07-02 13:07:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsybt2ut3h2i...

CVE-2025-24331

The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an unprivileged level. The capabilities retained from the root period are considered extensive after the privile...

TencentOS Server 3: trousers (TSSA-2022:0091)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0091 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2023-24331

Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816A2v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter...

CVE-2021-24331

The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psbdistance, psbbuttonsize, psbspeed, only validating them client side. This could allow high privilege users such as admin to set XSS payloads in them...

Linux Distros Unpatched Vulnerability : CVE-2020-24331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the...

RHEL 5 : trousers (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root...

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2023-24331

Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816A2v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter...

CVE-2023-24331

Affected device: D-Link DIR-816 router, firmware DIR-816_A2_v1.10CNB04. Issue: Command Injection via the urlAdd parameter that enables attackers to execute arbitrary commands. Documents do not specify exploit details beyond this vector or a concrete remediation; no explicit exploit availability i...

CVE-2024-24331

creationtimestamp| type| source ---|---|--- 2024-01-30 16:22:12+00:00| seen| https://t.me/ctinow/176045 2024-02-01 08:16:22+00:00| seen| https://t.me/ctinow/177355 2024-02-22 08:08:05+00:00| seen| https://t.me/ctinow/190520...

CVE-2024-24331

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiScheduleCfg function...

CVE-2024-24331

CVE-2024-24331 affects TOTOLINK A3300R, specifically version 17.0.0cu.557_B20221024, where a command-injection flaw exists in the setWiFiScheduleCfg function via the enable parameter. The issue is rated with high impact (CVSS v3.1: CRITICAL, 9.8) across confidentiality, integrity, and availabilit...

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7

CVE-2020-24331 affecting package trousers for versions less than 0.3.14-7. A patched version of the package is available...

CVE-2022-24331

creationtimestamp| type| source ---|---|--- 2022-02-25 18:20:59+00:00| seen| https://t.me/cibsecurity/38098...

CVE-2022-24331

In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible...

CVE-2022-24331

CVE-2022-24331 affects JetBrains TeamCity prior to 2021.1.4, where GitLab authentication impersonation is possible. This vulnerability enables impersonation by abusing GitLab authentication flows, with impact described as high to critical in CVSS scores (NETWORK, no auth required, user impact and...

AlmaLinux 8 : trousers (ALSA-2021:1627)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1627 advisory. - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the...