Lucene search
+L

41 matches found

Kitploit
Kitploit
added 2026/09/20 11:05 p.m.15 views

CVE-2026-58231

Script de detección de CVE-2026-58231 Herramienta de detección y verificación de precondiciones para CVE-2026-58231 — autorización inadecuada en el componente Data Hub Adapter de SAP Commerce Cloud CVSS 10.0. El script realiza únicamente comprobaciones no destructivas. No incluye ni ejecuta ningú...

10CVSS8.7AI score0.0171EPSS
SaveExploits2
SUSE Linux
SUSE Linux
added 2026/09/01 2:56 p.m.9 views

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.7.1. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/01 2:56 p.m.5 views

SUSE-SU-2026:3914-1 Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.7.1. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/01 10:17 a.m.14 views

CVE-2026-59681

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS0.01149EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 9:38 a.m.60 views

CVE-2026-59681

CVE-2026-59681 is an OS command injection in yast2-auth-client (SUSE/YaST). The vulnerable code in Auth::AuthConf (src/lib/auth/authconf.rb) interpolates unsanitized Active Directory configuration values—Organizational Unit , dnsHostName , AD user name, and AD domain name—directly into net ads jo...

8.8CVSS6.1AI score0.01149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 9:38 a.m.54 views

CVE-2026-59681 yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS0.01149EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 9:38 a.m.13 views

EUVD-2026-69001

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS6.1AI score0.01149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/01 9:38 a.m.12 views

CVE-2026-59681 yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS6.1AI score0.01149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.18 views

PT-2026-84137

Name of the Vulnerable Software and Affected Versions yast2-auth-client affected versions not specified Description An OS command injection flaw exists in the Auth::AuthConf function within src/lib/auth/authconf.rb. The issue occurs when the software assembles Samba net ads join, net ads lookup -...

8.8CVSS6.4AI score0.01149EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/08/31 4:35 p.m.10 views

SUSE CVE-2026-59681

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS6.1AI score0.01149EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2026/08/31 3:11 p.m.15 views

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.6.3. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

8.8CVSS5.9AI score0.01149EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/31 3:11 p.m.8 views

SUSE-SU-2026:3901-1 Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.6.3. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/08/31 2:58 p.m.13 views

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.5.5. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

8.8CVSS5.9AI score0.01149EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/31 2:58 p.m.7 views

SUSE-SU-2026:3895-1 Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.5.5. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/08/31 2:56 p.m.13 views

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.4.6. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

8.8CVSS5.9AI score0.01149EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/31 2:56 p.m.7 views

SUSE-SU-2026:3894-1 Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 4.4.6. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/08/31 2:55 p.m.13 views

Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 3.3.22. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installati...

8.8CVSS5.9AI score0.01149EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/31 2:55 p.m.7 views

SUSE-SU-2026:3893-1 Security update for yast2-auth-client

This update for yast2-auth-client fixes the following issue: Update to version 3.3.22. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/05 1:52 p.m.21 views

MAL-2026-12698 Malicious code in devplatform-auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d92af4e479fded008aa25786634ef3869a37c3624f612a320d308808a0626 Requiring devplatform-auth-client loads bootstrap.js, which selects a platform-specific payload URL, downloads opaque bytes over HTTPS from hardcoded...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 1:52 p.m.16 views

Malicious code in devplatform-auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d92af4e479fded008aa25786634ef3869a37c3624f612a320d308808a0626 Requiring devplatform-auth-client loads bootstrap.js, which selects a platform-specific payload URL, downloads opaque bytes over HTTPS from hardcoded...

5.6AI score
SaveExploits0References2
Rows per page
Query Builder