CVE-2025-56413

An OS Command injection vulnerability exists in the OperateSSH function of 1panel version 2.0.8 . Attackers can execute arbitrary commands by manipulating the operation parameter via the /api/v2/hosts/ssh/operate API endpoint. As a temporary workaround, it is recommended to restrict access to thi...

CVE-2023-39438

A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CLA-assistant by executing specific additional steps. This allows an arbitrary authenticated user to read CLA information including information of the persons who signed them as...

CVE-2017-7618

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service API operation calling its own callback, and infinite recursion by triggering EBUSY on a full queue...