348 matches found
CURL-CVE-2025-15079 libssh global known_hosts override
When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global knownhosts file...
PT-2026-1358
Name of the Vulnerable Software and Affected Versions badkeys versions 0.0.15 and below Description badkeys is a tool and library used for checking cryptographic public keys for known issues. In versions 0.0.15 and below, an attacker can inject content containing ASCII control characters, such as...
EUVD-2025-200052
Malicious code in mongodb-atlas-cli-toc-generator npm...
[SECURITY] Fedora 41 Update: xmedcon-0.25.3-1.fc41
This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...
[SECURITY] Fedora 41 Update: luksmeta-10-1.fc41
LUKSMeta is a command line utility for storing small portions of metadata in the LUKSv1 header for use before unlocking the volume...
[SECURITY] Fedora 42 Update: luksmeta-10-1.fc42
LUKSMeta is a command line utility for storing small portions of metadata in the LUKSv1 header for use before unlocking the volume...
[SECURITY] Fedora 43 Update: skopeo-1.20.0-5.fc43
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...
[SECURITY] Fedora 42 Update: python-sqlparse-0.4.2-14.fc42
sqlparse is a tool for parsing SQL strings. It can generate pretty-printed renderings of SQL in various formats. It is a python module, together with a command-line tool...
Fedora 43 : complyctl (2025-b527f8a1ee)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b527f8a1ee advisory. First minor release of complyctl - a new command line Interface for Fedora compliance assessment. It features a decoupled plug-in architecture for flexibilit...
CVE-2025-62174 Mastodon allows continued access after password reset via CLI
Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, when an administrator resets a user account's password via the command-line interface using bin/tootctl accounts modify --reset-password, active sessions and access tokens for...
[SECURITY] Fedora 41 Update: skopeo-1.20.0-3.fc41
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...
[SECURITY] Fedora 41 Update: pandoc-cli-3.1.11.1-34.1.fc41
Pandoc-cli provides a command-line executable that uses the pandoc library to convert between markup formats...
EUVD-2019-0326
Malware in sbrugna...
EUVD-2020-0170
Malware in sbrugna...
EUVD-2020-18833
Malware in sbrugna...
EUVD-2023-55064
Malicious code in bioql PyPI...
EUVD-2023-55080
Malicious code in bioql PyPI...
EUVD-2024-1521
Malicious code in bioql PyPI...