1564 matches found
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Ejecución Remota de Código Se requiere acceso al módulo "Software Package Updates" para desencadenar la vulnerabilidad. Los usuarios con acceso a este módulo pueden ejecutar comandos con privilegios de root en el sistema realizando una Inyección de...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
一个用于在 Webmin 1.997 上利用 CVE-2022-36446 软件包更新 RCE（已认证）的 Python 脚本。 功能特性 支持 HTTP 和 HTTPS（通过 --insecure 甚至支持自签名证书）。 通过 --command 选项执行单条命令。 通过 --interactive 选项进入交互式控制台。...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE 認証済み Webmin バージョン 1.997 未満における Remote Code Execution の脆弱性のための Exploit。Software Package Updates モジュールを介して。 動作の仕組み Webmin の Software Package Updates モジュールは、パラメータ u をシステムに渡す前に適切にサニタイズしません。そのモジュールにアクセスできる認証済みユーザーは、root として実行される任意のコマンドを注入できます。 前提条件 Exploit...
CVE-2026-78985 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-78963 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-55857 vulnerabilities
Vulnerabilities for packages: flyway, keycloak, zipkin, debezium...
Malicious code in giga-clean-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, authentik, openstack-horizon-2026.1-fips, authentik-fips...
MAL-2026-12864 Malicious code in bnpl-blocks-atom-bnpl-badge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...
MAL-2026-11132 Malicious code in bianira-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...
MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-62019
These are all security issues fixed in the libsoup-3 0-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57481
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 fix dwg next entity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwg bmp thumbnail overflow checks CVE-2026-15181, boo1271169 Resolve NULL pointer dereference SEGV in match BLOCK...
Malicious code in ashcare-ui-ember (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zzpdfvar03 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwkopt6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvhe14c (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zpx52524pb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...