Lucene search
+L

624 matches found

Cvelist
Cvelist
•added 2025/11/07 7:42 p.m.•76 views

CVE-2025-10230 Samba: command injection in wins server hook script

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS0.39769EPSS
SaveExploits2References3
Mend
Mend
•added 2025/11/07 7:42 p.m.•8 views

CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS8.4AI score0.39769EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
•added 2025/11/07 7:42 p.m.•17 views

CVE-2025-10230 Samba: command injection in wins server hook script

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS8.4AI score0.39769EPSS
SaveExploits2References3
CVE
CVE
•added 2025/11/07 7:42 p.m.•247 views

CVE-2025-10230

CVE-2025-10230 involves Samba’s front-end WINS hook where NetBIOS names from registration packets are inserted into a shell without proper validation or escaping, enabling unauthenticated remote code execution as the Samba process. The issue is rooted in unsanitized NetBIOS data in WINS registrat...

10CVSS8.4AI score0.39769EPSS
SaveExploits2References5
AlpineLinux
AlpineLinux
•added 2025/11/07 7:42 p.m.•43 views

CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS8.4AI score0.39769EPSS
SaveExploits2
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•25 views

Samba operating system command injection vulnerability

Samba is Samba open source a standard Windows interoperability program suite for Linux and Unix. Samba suffers from an operating system command injection vulnerability that stems from a lack of proper validation or escaping of NetBIOS names in front-end WINS hook processing, which could lead to...

10CVSS8.7AI score0.39769EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•17 views

Samba WINS hook RCE (CVE-2025-10230)

In the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller's...

10CVSS8.6AI score0.39769EPSS
SaveExploits2References2
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•34 views

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba, particularly in the handling of the front-end WINS hook: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets is inserted into shell commands and executed b...

10CVSS8.5AI score0.39769EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
•added 2025/10/16 11:38 p.m.•23 views

SUSE CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS8.4AI score0.39769EPSS
SaveExploits2References11
RedhatCVE
RedhatCVE
•added 2025/10/15 12:47 p.m.•37 views

CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS8.6AI score0.39769EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-1999-0791

Malware in sbrugna...

10CVSS6.4AI score0.02171EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-1999-0518

Malware in sbrugna...

6.4CVSS6.3AI score0.01466EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2001-1091

Malware in sbrugna...

5CVSS6.4AI score0.01324EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2001-0264

Malware in sbrugna...

5CVSS6.4AI score0.02985EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2014-0684

Malware in sbrugna...

4.3CVSS5.8AI score0.06893EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•33 views

EUVD-2017-0541

Malware in sbrugna...

6.5CVSS7.3AI score0.0258EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-1999-0516

Malware in sbrugna...

7.5CVSS6.4AI score0.0479EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2000-0990

Malware in sbrugna...

2.6CVSS6.4AI score0.12513EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2016-4331

Malware in sbrugna...

5.3CVSS6.5AI score0.13593EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-8855

Malware in sbrugna...

5.5CVSS5.9AI score0.01243EPSS
SaveExploits0References2
Rows per page
Query Builder