127 matches found
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
A flaw was found in Python. The webbrowser.open API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options,...
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
A flaw was found in Python. The webbrowser.open API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options,...
CVE-2026-34792
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logsclamav.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open call, which allows command injection due to an incomplete...
can: mcp251x: fix deadlock in error path of mcp251x_open
...
EUVD-2025-208911
AWStats 8.0 is vulnerable to Command Injection via the open function...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
DEBIAN-CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
UBUNTU-CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
AWStats 安全漏洞
AWStats is a log analysis tool developed by eldy, a personal developer. This software supports the analysis of web site logs on all operating systems such as IIS 5.0 and Apache. It can analyze logs from web, WAP, proxy, streaming servers, FTP, and mail servers. AWStats 8.0 has a security...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
CVE-2025-63261
AWStats 8.0 is affected by CVE-2025-63261: a Command Injection vulnerability in the open function. Root cause and impact as per provided sources indicate potential impact to confidentiality, integrity, and availability (CVSS v3.1: 7.8, HIGH) when exploited locally. Public advisories and vendor re...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
Dioxus Components security vulnerabilities
Dioxus Components is a basic component open-sourced by Dioxus Labs. Version 41e4242ecb1062d04ae42a5215363c1d9fd4e23a of Dioxus Components had a security vulnerability. This vulnerability stemmed from the useofanimatedopen function, which used the user-provided ID to format eval strings, potential...
CVE-2025-68821
A flaw was found in the Linux kernel's Filesystem in Userspace FUSE subsystem. This vulnerability allows a local attacker to cause a system-wide deadlock. The flaw occurs due to incorrect handling of inode references during readahead operations when the FUSE server does not implement the open...