MAL-2026-8217 Malicious code in oaihx0305933 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-8217

creationtimestamp| type| source ---|---|--- 2026-05-10 04:30:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlhwgbfuff2h...

CVE-2026-8217 Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection

A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation of the argument troiaCode results in os command injection. The attack may be initiated remotely. T...

CVE-2025-8217

creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:04+00:00| seen| https://gist.github.com/alon710/f4a98d8ab250f2affdf1bc9f675091cc 2026-01-24 22:28:52+00:00| seen| https://gist.github.com/alon710/689d4b4a36f24f9c99e58fa042536caa 2026-01-24 22:28:55+00:00| seen|...

CVE-2025-8217

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

CVE-2025-8217 Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

CVE-2019-8217

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2017-8217

TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface...

CVE-2024-8217

creationtimestamp| type| source ---|---|--- 2024-08-28 00:05:11+00:00| seen| https://t.me/cvedetector/4279...

CVE-2024-8217 SourceCodester E-Commerce Website registration.php sql injection

A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2019-8217

creationtimestamp| type| source ---|---|--- 2024-01-17 07:36:21+00:00| seen| https://t.me/ctinow/169124...

SUSE CVE-2015-8217

The ffhevcparsesps function in libavcodec/hevcps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted High Efficiency Video Coding HEVC da...

CVE-2020-8217

A cross site scripting XSS vulnerability in Pulse Connect Secure 9.1R8 allowed attackers to exploit in the URL used for Citrix ICA...

CVE-2020-8217

Pulse Connect Secure versions prior to 9.1R8 are affected by a cross-site scripting (XSS) vulnerability in the URL used for Citrix ICA. The root cause is insufficient validation/cleaning of client data in the web application, allowing attacker-controlled input to execute client-side code. Impact ...

CVE-2020-8217

A cross site scripting XSS vulnerability in Pulse Connect Secure 9.1R8 allowed attackers to exploit in the URL used for Citrix ICA...

CVE-2019-8217

Adobe Acrobat and Reader are affected by CVE-2019-8217 (use-after-free) in versions 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier. Successful exploitation could lead to arbitrary code execution. Patch guidance is provided in APSB19-49 (Adobe security advis...

Adobe Acrobat 2017 Security Updates (APSB19-49) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Reader < 2015.006.30504 / 2017.011.30150 / 2019.021.20047 Multiple Vulnerabilities (APSB19-49) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30504, 2017.011.30150, or 2019.021.20047. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier,...

Debian: Security Advisory (DLA-1611-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security feature bypass

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...