3101 matches found
CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
EUVD-2025-35830
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
CVE-2025-10680
OpenVPN versions 2.7_alpha1 through 2.7_beta1 on POSIX-based platforms are vulnerable to a script injection attack. The root cause is a lack of input sanitation for special elements during the processing of --dns and --dhcp-option arguments. When the --dns-updown script is in use, a remote authen...
CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
CVE-2025-10680
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
OpenVPN 安全漏洞
OpenVPN is a software package for creating encrypted tunnels for Virtual Private Networks VPNs from the US company OpenVPN, which uses the OpenSSL library to encrypt data and control information, and allows the created VPN to be authenticated using a public key, an electronic certificate, or a...
CVE-2025-10680: Improper Neutralization of Special Elements used in an OS Command
OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...
PT-2025-43608
Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7 beta1 Description The OpenVPN software, specifically the --dns-updown component, is susceptible to a flaw that allows a remote authenticated server to inject shell commands via DNS variables when the...
OpenVPN -- avoid buffer overread parsing routes or endpoints
Mikhail Khachaiants reports: socket: reject mismatched address family in getaddrgeneric. Add a family check to prevent copying address data of the wrong type, which could cause buffer over-read when parsing routes or endpoints...
EUVD-2016-7256
Malware in sbrugna...
EUVD-2021-20218
Malware in sbrugna...
EUVD-2020-30262
Malware in sbrugna...
EUVD-2020-20028
Malware in sbrugna...
EUVD-2017-8960
Malware in sbrugna...
EUVD-2005-2535
Malware in sbrugna...
EUVD-2005-2533
Malware in sbrugna...
EUVD-2018-2717
Malware in sbrugna...