1573 matches found
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
Webmin 1.997 に対して Software Package Updates RCE（認証済み）を悪用するPythonスクリプト。 機能 HTTP と HTTPS をサポート（--insecure を使用して自己署名証明書でも動作）。 --command オプションによる単一コマンド実行。 --interactive オプションによる対話型コンソール。 使用方法 $ ./CVE-2022-36446.py -h CVE-2022-36446 - Webmin 1.997 - Software Package Updates RCE Authenticated v1.1 - by...
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 원격 코드 실행 취약점을 트리거하려면 "소프트웨어 패키지 업데이트" 모듈에 접근할 수 있어야 합니다. 이 모듈에 접근 권한이 있는 사용자는 새 패키지 설치 중 OS 명령 주입을 통해 시스템에서 루트 권한으로 명령을 실행할 수 있습니다. HTTP 요청: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000 Cookie: redirect=1; testing=1;...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE 인증 필요 Webmin 1.997 미만 버전에서 Software Package Updates 모듈을 통한 원격 코드 실행 취약점 익스플로잇입니다. 작동 원리 Webmin의 Software Package Updates 모듈은 u 매개변수를 시스템에 전달하기 전에 제대로 살균sanitize하지 않습니다. 해당 모듈에 접근 권한이 있는 인증된 사용자는 root 권한으로 실행되는 임의의 명령어를 주입할 수 있습니다. 사전 요구 사항 익스플로잇을 실행하기 전에 의존성을...
CVE-2026-78985 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-78963 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-55857 vulnerabilities
Vulnerabilities for packages: keycloak, zipkin, flyway, debezium...
Malicious code in giga-clean-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik, authentik-fips...
MAL-2026-12864 Malicious code in bnpl-blocks-atom-bnpl-badge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...
Photon OS 5.0: Gtk3 PHSA-2025-5.0-91-0442
An update of the gtk3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0442. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MAL-2026-11132 Malicious code in bianira-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...
MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-62019
These are all security issues fixed in the libsoup-3 0-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57481
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 fix dwg next entity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwg bmp thumbnail overflow checks CVE-2026-15181, boo1271169 Resolve NULL pointer dereference SEGV in match BLOCK...
Malicious code in ashcare-ui-ember (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zzpdfvar03 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwkopt6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvhe14c (RubyGems)
--- -= Per source details. Do not edit below this line.=-...