15809 matches found
Clam AntiVirus Toolkit 1.5.0
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...
Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0
Summary A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. Impact An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthoriz...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987324)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987324 advisory. In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: netjet: Fix crash in njprobe: 'njsetup' in netjet.c might fail with -EIO and in this...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986520)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986520 advisory. In the Linux kernel, the following vulnerability has been resolved: um: line: always fill errorout in setuponeline The pointer isn't initialized by callers, but I ha...
Dell PowerProtect Data Domain security vulnerabilities
Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A security vulnerability exists in Dell PowerProtect Data Domain that stems from a stack buffer overflow in the DDSH CLI, which could lead to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xz (UTSA-2025-986157)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986157 advisory. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a crafted file nam...
EUVD-2025-32589
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
AZL-68231 CVE-2025-61984 affecting package openssh for versions less than 9.8p1-5
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
HTTP Request Smuggling
io.netty, netty-codec-http is vulnerable to HTTP Request Smuggling. The vulnerability is due to incorrectly accepting standalone newline characters LF as a chunk-size line terminator instead of requiring CRLF per HTTP/1.1 standards, which allows an attacker to craft malicious requests that are...
CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
CVE-2025-61984: Improper Handling of Invalid Use of Special Elements
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
Cisco NX-OS CLI File Read Write
The vulnerability of the Cisco NX-OS operating system’s command-line interface CLI is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to gain read and write access to arbitrary files...
Cisco Unified Computing System Manager Privilege Escalation
The vulnerability of the command-line interface CLI of the Cisco Unified Computing System UCS Manager relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to gain read, modify, and create arbitrary files...
OpenSSH security vulnerabilities
OpenSSH OpenBSD Secure Shell is a Canadian OpenBSD open source set of connection tools for secure access to remote computers. The tools are an open source implementation of the SSH protocol and support encryption of all transmissions, effectively blocking eavesdropping, connection hijacking, and...
Cisco Unified Computing System Manager Command Line Code Execution
The vulnerability of the command-line interface CLI of the Cisco Unified Computing System UCS Manager relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Exploit for Improper Authorization in Vercel Next.Js
MiddleForce 🔍 Overview MiddleForce is a speci...
EUVD-2024-52842
Malicious code in bioql PyPI...