Lucene search
+L

3070 matches found

Github Security Blog
Github Security Blog
•added 2025/10/13 8:19 p.m.•18 views

tracexec has `env` command argument injection via environment variables starting with dash in traced exec events

Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause argument injection for the env command...

7.4AI score
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/13 12:00 a.m.•2 views

PT-2025-43577

Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause argument injection for the env command...

1CVSS6.1AI score
SaveExploits0References5
OSV
OSV
•added 2025/10/08 5:41 p.m.•13 views

JLSEC-2025-4 Argument injection in `gettreesha()` function in Registrator.jl

Impact If the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the gettreesha function. This can then lead to a potential RCE. Patches Users should upgrade immediately to v1.9.5. All prior versions are vulnerable...

9.8CVSS7.2AI score0.00683EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/08 12:00 a.m.•2 views

PT-2025-46010

Impact If the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the gettreesha function. This can then lead to a potential RCE. Patches Users should upgrade immediately to v1.9.5. All prior versions are vulnerable...

9.8CVSS5.7AI score
SaveExploits0References3
NVD
NVD
•added 2025/10/07 8:15 p.m.•17 views

CVE-2025-36565

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...

6.7CVSS0.00205EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/07 8:15 p.m.•17 views

CVE-2025-36565

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...

6.7CVSS5.9AI score0.00205EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 7:49 p.m.•20 views

EUVD-2025-32886

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...

6.7CVSS6.4AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/07 7:49 p.m.•22 views

CVE-2025-36565

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...

6.7CVSS0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/07 7:49 p.m.•8 views

CVE-2025-36565

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...

6.7CVSS7AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/07 7:49 p.m.•36 views

CVE-2025-36565

Dell PowerProtect Data Domain running DD OS on Feature Release 7.7.1.0–8.1.0.10, LTS2024 7.13.1.0–7.13.1.25, and LTS 2023 7.10.1.0–7.10.1.50 is affected by an Improper Neutralization of Argument Delimiters (Argument Injection) vulnerability. A local attacker with high privileges could exploit thi...

6.7CVSS7AI score0.00205EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/10/07 7:15 p.m.•13 views

CVE-2025-43905

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

6.5CVSS5.8AI score0.0033EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/07 7:15 p.m.•12 views

CVE-2025-43905

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

6.5CVSS0.0033EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/07 7:06 p.m.•8 views

CVE-2025-43905

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

4.3CVSS5.7AI score0.0033EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 7:06 p.m.•16 views

EUVD-2025-32907

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

4.3CVSS6.2AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/07 7:06 p.m.•21 views

CVE-2025-43905

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

4.3CVSS0.0033EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2011-0924

Malware in sbrugna...

9.3CVSS6.4AI score0.03539EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2018-12801

Malware in sbrugna...

9CVSS8.8AI score0.06686EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-5339

Malware in sbrugna...

9CVSS8.8AI score0.01946EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-6092

Malware in sbrugna...

9.3CVSS9.2AI score0.02307EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-4809

Malware in sbrugna...

5CVSS6AI score0.0157EPSS
SaveExploits0References4
Rows per page
Query Builder