8 matches found
CLSA-2026-1792161839 TuxCare security update for web3-core-requestmanager (1 CVE)
TuxCare rebuilt web3-core-requestmanager to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
PT-2026-124352
TuxCare rebuilt web3-core-requestmanager to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam
CVE-2026-33439 — clean-room OpenAM PoC This package rebuilds...
CVE-2026-45579 DIRAC: RCE in RequestManager due to eval on untrusted input
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py exportgetRequestCountersWeb function passes an authenticated caller-controlled groupingAttribute to...
CVE-2026-45579 DIRAC: RCE in RequestManager due to eval on untrusted input
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py exportgetRequestCountersWeb function passes an authenticated caller-controlled groupingAttribute to...
CVE-2026-45579 DIRAC: RCE in RequestManager due to eval on untrusted input
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py exportgetRequestCountersWeb function passes an authenticated caller-controlled groupingAttribute to...
Remote Code Execution (RCE)
DIRAC RequestManager is vulnerable to remote code execution.The vulnerability is due to the use of eval on untrusted input, which allows an authenticated attacker to execute arbitrary code or system commands on the DIRAC server with the privileges of the user running the DIRAC services...
PT-2024-22000 · Unknown · Eskooly Web Product
Name of the Vulnerable Software and Affected Versions: Eskooly Web Product version 3.0 Description: The issue allows a remote attacker to execute arbitrary code via the searchby parameter of the "allstudents.php" component and the id parameter of the "requestmanager.php" component. This enables t...