49 matches found
Nessus_CVE-2014-6271_check
NessusCVE-2014-6271check Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271...
CVE-2026-84604
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
CVE-2026-84604
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
CVE-2026-84604
A stack buffer overflow vulnerability exists in Apple macOS (specifically versions prior to Golden Gate 27 , Sequoia 15.8.2 , and Tahoe 26.7.2 ). The flaw is caused by an input validation issue during the processing of audit files . A maliciously crafted audit file can exploit this vulnerability ...
EUVD-2026-110351
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
PT-2026-125417
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
Apple MacOS: CVE-2026-84604: OS X update for OpenBSM
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
Tenable Security Center SCAP Audit File Command Injection
This is a Metasploit module that demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. This module requires Metasploit: https://metasploit.com/download Current...
Exploit for OS Command Injection in Tenable Security_Center
C...
Tenable Security Center SCAP Audit File Command Injection
Tenable Security Center prior to 6.9.0 allows an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. Filesystem::saveTmp builds staged upload filenames from the raw client-supplied context form parameter tempnam prefix, which is not...
EUVD-2026-46391
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality...
CVE-2026-64881
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability...
CVE-2026-64879
Technical details about CVE-2026-64879 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-64879 Command Injection
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality...
CVE-2026-64879 Command Injection
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality...
CVE-2026-64879: Improper Neutralization of Special Elements used in an OS Command
A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to inject shell metacharacters and achieve command injection via the audit file upload functionality...
CVE-2026-64881: Improper Neutralization of Special Elements used in an OS Command
The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables command injection when chained with a related vulnerability...
PT-2026-62103
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An issue exists in the audit file upload functionality where a filename provided during the upload process is not properly sanitized before being used in system...
PT-2026-62105
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The audit file upload handler fails to sanitize filenames, which allows shell metacharacters to be passed into system command execution. This input validation...