3140 matches found
CVE-2025-10680
OpenVPN versions 2.7_alpha1 through 2.7_beta1 on POSIX-based platforms are vulnerable to a script injection attack. The root cause is a lack of input sanitation for special elements during the processing of --dns and --dhcp-option arguments. When the --dns-updown script is in use, a remote authen...
CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
EUVD-2025-35830
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
OpenVPN security vulnerabilities
OpenVPN is a software package for creating encrypted tunnels for Virtual Private Networks VPNs from the US company OpenVPN, which uses the OpenSSL library to encrypt data and control information, and allows the created VPN to be authenticated using a public key, an electronic certificate, or a...
CVE-2025-10680: Improper Neutralization of Special Elements used in an OS Command
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
PT-2025-43608
Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7 beta1 Description The OpenVPN software, specifically the --dns-updown component, is susceptible to a flaw that allows a remote authenticated server to inject shell commands via DNS variables when the...
OpenVPN -- avoid buffer overread parsing routes or endpoints
Mikhail Khachaiants reports: socket: reject mismatched address family in getaddrgeneric. Add a family check to prevent copying address data of the wrong type, which could cause buffer over-read when parsing routes or endpoints...
EUVD-2020-20029
Malware in sbrugna...
EUVD-2021-26910
Malware in sbrugna...
EUVD-2020-20156
Malware in sbrugna...
EUVD-2005-2532
Malware in sbrugna...
EUVD-2005-2534
Malware in sbrugna...
EUVD-2005-2535
Malware in sbrugna...
EUVD-2005-3392
Malware in sbrugna...
EUVD-2005-3408
Malware in sbrugna...
EUVD-2018-20708
Malware in sbrugna...