Photon OS 4.0: Alsa PHSA-2026-4.0-0958

An update of the alsa package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0958. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the mt7601u_rx_next_seg_len() function in the drivers/net/wireless/mediatek/mt7601u/dma.c module of the wireless adapter driver for Mediatek’s Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7601urxnextseglen function in the drivers/net/wireless/mediatek/mt7601u/dma.c module of the Mediatek wireless adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

CVE-2025-68160 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2025-68160 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

OS Command Injection

clawdbot is vulnerable to an OS command injection. The vulnerability is due to improper escaping and validation of user-supplied input in SSH-related functions, which allows an attacker to inject malicious command strings via the project root path or crafted SSH target arguments, leading to...

Authentication Bypass by Alternate Name

Overview org.apache.shiro:shiro-core is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name while serving static files from...

fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing

A flaw was found in FontForge. This use-after-free vulnerability, occurring during the parsing of SFD Spline Font Database files, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a...

[SECURITY] Fedora 42 Update: node-exporter-1.10.2-3.fc42

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

[SECURITY] Fedora 43 Update: node-exporter-1.10.2-3.fc43

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

The vulnerability of the iwl_txq_reclaim() function in the drivers/net/wireless/intel/iwlwifi/queue/tx.c file of the Intel wireless driver module for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the iwltxqreclaim function in the drivers/net/wireless/intel/iwlwifi/queue/tx.c file of the Intel wireless driver for Linux operating systems is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kvm_get_mode() function in the arch/arm64/include/asm/kvm_host.h support module for the 64-bit ARM processor in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kvmgetmode function in the arch/arm64/include/asm/kvmhost.h support module for the 64-bit ARM processor-based Linux operating system is related to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause a servi...

D-Link DIR-823X 操作系统命令注入漏洞

The D-Link DIR-823X is a wireless router produced by D-Link Corporation. The D-Link DIR-823X 250416 version has a vulnerability related to operating system command injection. This vulnerability stems from incorrect operations on the function sub4211C8 in the file/goform/setfiltering, which may le...

Photon OS 5.0: Expat PHSA-2026-5.0-0756

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0756. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-2188 UTT 进取 521G formPdbUpConfig sub_446B18 os command injection

A vulnerability was determined in UTT 进取 521G 3.1.1-190816. The impacted element is the function sub446B18 of the file /goform/formPdbUpConfig. Executing a manipulation of the argument policyNames can lead to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-2184 Great Developers Certificate Generation System csv.php os command injection

A vulnerability was detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This vulnerability affects unknown code of the file /restructured/csv.php. The manipulation of the argument photo results in os command injection. The attack can be...

CVE-2026-2155

The CVE-2026-2155 entry concerns D-Link DIR-823X (version 250416) and the Configuration Handler’s /goform/set_dmz component. The flaw resides in function sub_4208A0, where manipulating the arguments dmz_host/dmz_enable enables operating system command injection. This allows remote execution of co...

CVE-2026-2143

A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/setddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to os command injection. The attack is...

CVE-2026-2131 XixianLiang HarmonyOS-mcp-server input_text os command injection

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

CVE-2026-2120

CVE-2026-2120 affects D-Link DIR-823X 250416. The issue is an OS command injection in the Configuration Parameter Handler, triggered by manipulating arguments in /goform/set_server_settings (terminal_addr, server_ip, server_port). The attack can be remote and publicly available exploits exist. Af...

CVE-2026-2120 D-Link DIR-823X Configuration Parameter set_server_settings os command injection

A vulnerability was identified in D-Link DIR-823X 250416. This affects an unknown function of the file /goform/setserversettings of the component Configuration Parameter Handler. The manipulation of the argument terminaladdr/serverip/serverport leads to os command injection. The attack may be...