CVE-2025-45311

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...

CVE-2025-45311

The fail2ban-client version v0.11.2 is affected by a vulnerability involving insecure permissions . This flaw allows attackers with limited sudo privileges to perform arbitrary operations as root . However, it is noted that some parties dispute this vulnerability, arguing that the software's abil...

CVE-2025-45311: Incorrect Privilege Assignment

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...

Fail2ban security vulnerability

fail2ban is an application of fail2ban open source. Disablement leads to multiple hosts with incorrect authentication. A security vulnerability exists in fail2ban version v0.11.2 that stems from improper privilege control and could lead to the execution of arbitrary actions...

EUVD-2009-4981

Malware in sbrugna...

EUVD-2013-6959

Malware in sbrugna...

EUVD-2021-19521

Malware in sbrugna...

EUVD-2013-6960

Malware in sbrugna...

EUVD-2006-6285

Malware in sbrugna...

EUVD-2012-5526

Malware in sbrugna...

EUVD-2013-2137

Malware in sbrugna...

EUVD-2009-0366

Malware in sbrugna...

EUVD-2022-40927

Malicious code in bioql PyPI...

CVE-2025-52576

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard is vulnerable to username enumeration and IP spoofing-based brute-force protection bypass. By analyzing login behavior and abusing trusted HTTP headers, an attacker can determine vali...

A Virtual Cybersecurity Department for Securing Digital Twins in Water Distribution Systems

Digital twins DTs help improve real-time monitoring and decision-making in water distribution systems. However, their connectivity makes them easy targets for cyberattacks such as scanning, denial-of-service DoS, and unauthorized access. Small and medium-sized enterprises SMEs that manage these...

Fail2Ban 0.11.2 Privilege Escalation / Command Execution

If a user can execute fail2ban-client with sudo, they can achieve local privilege escalation and command injection via user-modified actions. Author: Raed Ahsan Date: 24/03/2025 Fail2Ban-client privilege-escalation """ Fail2Ban Automated Exploit Script - CVE Candidate...

OPENSUSE-SU-2024:10749-1 fail2ban-0.11.2-3.1 on GA media

These are all security issues fixed in the fail2ban-0.11.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10347-1 SuSEfirewall2-fail2ban-0.9.5-1.1 on GA media

These are all security issues fixed in the SuSEfirewall2-fail2ban-0.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

Mobatek MobaXterm < 22.3 (CVE-2022-38337)

The version of Mobatek MobaXterm installed on the remote host is prior to 22.3. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-38337 advisory. - When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Fail2ban vulnerability (USN-5232-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5232-1 advisory. Jakub oczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain...