1558 matches found
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE Autenticato Exploit per la vulnerabilità di Remote Code Execution in Webmin versioni precedenti a 1.997, attraverso il modulo Software Package Updates. Come funziona? Il modulo Software Package Updates di Webmin non sanifica correttamente il parametro u prima di...
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Execução Remota de Código no Webmin 1.996 É necessário acesso ao módulo "Atualizações de Pacotes de Software" para acionar a vulnerabilidade. Usuários com acesso a este módulo podem executar comandos com privilégios de root no sistema realizando Injeção de Comandos...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
Ein Python-Skript zur Ausnutzung von CVE-2022-36446 Software Package Updates RCE Authenticated auf Webmin 1.997. Funktionen Unterstützt HTTP und HTTPS auch mit selbstsignierten Zertifikaten mit --insecure. Einzelne Befehlsausführung mit der Option --command. Interaktive Konsole mit der Option...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik...
MAL-2026-12864 Malicious code in bnpl-blocks-atom-bnpl-badge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...
MAL-2026-11132 Malicious code in bianira-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...
MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-57481
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 fix dwg next entity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwg bmp thumbnail overflow checks CVE-2026-15181, boo1271169 Resolve NULL pointer dereference SEGV in match BLOCK...
Malicious code in zzpdfvar03 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwkopt6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvhe14c (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zpx52524pb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in xwandxml1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in xabczztest (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wphimp (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandpdffossila (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandmine24680 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9213 Malicious code in wandhgenc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...