345 matches found
CVE-2026-56389: Improper Neutralization of Special Elements used in an OS Command
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...
Ubuntu 24.04 LTS : age vulnerability (USN-8372-1)
The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8372-1 advisory. It was discovered that age did not properly validate plugin names. An attacker could possibly use this issue to cause execution of an arbitrary program by supplyi...
EUVD-2026-32665
Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to before 1.0.2, an logic error causes anchor programs to accept any program id when requiring the system program id, causing false assumptions resulting in potential arbitrary cpi in progra...
PT-2026-40725
Name of the Vulnerable Software and Affected Versions anchor-lang versions prior to 1.0.2 Description A logic error in the account validation process allows programs to accept any executable program ID when the system program ID is required. This occurs because the validation path for Program use...
PT-2026-39170
A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH...
Iperius Backup security vulnerabilities
Iperius Backup is a backup tool developed by the Italian company Iperius Backup. Version 6.1.0 of Iperius Backup contains a security vulnerability. This vulnerability stems from an issue with privilege escalation, which could allow low-privilege users to execute arbitrary programs by elevating...
CVE-2020-12473
MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program...
CVE-1999-0343
A malicious Palace server can force a client to execute arbitrary programs...
CVE-2019-12137
Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note...
EUVD-2015-2224
Malware in sbrugna...
EUVD-1999-1282
Malware in sbrugna...
EUVD-2011-0657
Malware in sbrugna...
EUVD-2004-2189
Malware in sbrugna...
EUVD-2003-0332
Malware in sbrugna...
EUVD-2004-1160
Malware in sbrugna...
EUVD-2012-2968
Malware in sbrugna...
EUVD-2013-0906
Malware in sbrugna...
EUVD-2016-5288
Malware in sbrugna...