1564 matches found
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 远程代码执行 需要访问"软件包更新"模块才能触发该漏洞。拥有该模块访问权限的用户可以在安装新软件包时，通过执行操作系统命令注入，以 root 权限在系统上运行命令。 HTTP 请求： root@kitploit: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000 Cookie: redirect=1; testing=1; sid=05ebaaec3707b0075c641325e9153608...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
一个用于在 Webmin 1.997 上利用 CVE-2022-36446 软件包更新 RCE（已认证）的 Python 脚本。 功能特性 支持 HTTP 和 HTTPS（通过 --insecure 甚至支持自签名证书）。 通过 --command 选项执行单条命令。 通过 --interactive 选项进入交互式控制台。...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE 認証済み Webmin バージョン 1.997 未満における Remote Code Execution の脆弱性のための Exploit。Software Package Updates モジュールを介して。 動作の仕組み Webmin の Software Package Updates モジュールは、パラメータ u をシステムに渡す前に適切にサニタイズしません。そのモジュールにアクセスできる認証済みユーザーは、root として実行される任意のコマンドを注入できます。 前提条件 Exploit...
CVE-2026-78985 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-78963 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-55857 vulnerabilities
Vulnerabilities for packages: zipkin, debezium, flyway, keycloak...
Malicious code in giga-clean-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
MAL-2026-12864 Malicious code in bnpl-blocks-atom-bnpl-badge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...
MAL-2026-11132 Malicious code in bianira-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...
MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-62019
These are all security issues fixed in the libsoup-3 0-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57481
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 fix dwg next entity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwg bmp thumbnail overflow checks CVE-2026-15181, boo1271169 Resolve NULL pointer dereference SEGV in match BLOCK...
Malicious code in ashcare-ui-ember (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zzpdfvar03 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwkopt6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvhe14c (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zpx52524pb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...