CVE-2025-45311

CVE-2025-45311 affects fail2ban-client v0.11.2. Insecure permissions could allow attackers with limited sudo privileges to perform arbitrary operations as root. Note: some sources dispute the root-privilege interpretation, but multiple advisories describe the risk. Remediation: update to a newer ...

CVE-2025-45311

Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is...

CVE-2025-45311

Removed by vendor...

EUVD-2006-6285

Malware in sbrugna...

EUVD-2013-6960

Malware in sbrugna...

EUVD-2009-4981

Malware in sbrugna...

EUVD-2012-5526

Malware in sbrugna...

EUVD-2013-6959

Malware in sbrugna...

EUVD-2009-0366

Malware in sbrugna...

EUVD-2021-19521

Malware in sbrugna...

EUVD-2013-2137

Malware in sbrugna...

EUVD-2022-40927

Malicious code in bioql PyPI...

CVE-2025-52576

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard is vulnerable to username enumeration and IP spoofing-based brute-force protection bypass. By analyzing login behavior and abusing trusted HTTP headers, an attacker can determine vali...

A Virtual Cybersecurity Department for Securing Digital Twins in Water Distribution Systems

Digital twins DTs help improve real-time monitoring and decision-making in water distribution systems. However, their connectivity makes them easy targets for cyberattacks such as scanning, denial-of-service DoS, and unauthorized access. Small and medium-sized enterprises SMEs that manage these...

Fail2Ban 0.11.2 Privilege Escalation / Command Execution

If a user can execute fail2ban-client with sudo, they can achieve local privilege escalation and command injection via user-modified actions. Author: Raed Ahsan Date: 24/03/2025 Fail2Ban-client privilege-escalation """ Fail2Ban Automated Exploit Script - CVE Candidate...

OPENSUSE-SU-2024:10347-1 SuSEfirewall2-fail2ban-0.9.5-1.1 on GA media

These are all security issues fixed in the SuSEfirewall2-fail2ban-0.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10749-1 fail2ban-0.11.2-3.1 on GA media

These are all security issues fixed in the fail2ban-0.11.2-3.1 package on the GA media of openSUSE Tumbleweed...

Mobatek MobaXterm < 22.3 (CVE-2022-38337)

The version of Mobatek MobaXterm installed on the remote host is prior to 22.3. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-38337 advisory. - When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Fail2ban vulnerability (USN-5232-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5232-1 advisory. Jakub oczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain...

No rate limiting on creating access token

Description: Access token creation is a critical security component in many applications, especially when it comes to user authentication and authorization. Without proper rate limiting controls, attackers may exploit this process to launch various types of attacks, such as brute force attacks,...