Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/08/05 8:37 p.m.31 views

CVE-2026-71312 rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...

8CVSS0.00276EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2021-43299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack overflow in PJSUA API when calling pjsuaplayercreate. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a...

9.8CVSS8.8AI score0.02514EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/02/16 12:0 a.m.6 views

PT-2022-1916

Name of the Vulnerable Software and Affected Versions PJSIP affected versions not specified Description The issue is related to a stack overflow in the PJSUA API when calling the pjsua player create function. An attacker-controlled filename argument may cause a buffer overflow since it is copied ...

10CVSS7.8AI score0.0462EPSS
SaveExploits6References63
Rows per page
Query Builder