GHSA-MHG7-666J-CQG4 Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions

Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability enabled writing to sensitive directories like the .claude folder and paths outside the project scope. Exploiting this require...

Fedora 44 : vultr-cli (2026-ce174cdc78)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ce174cdc78 advisory. Automatic update for vultr-cli-3.8.0-1.fc44. Changelog Wed Feb 4 2026 Major Hayden - 3.8.0-1 - Update to 3.8.0 - Fixes CVE-2025-11065: go-viper/mapstructure...

GHSA-7MV8-J34Q-VP7Q @anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the...

Claude Code vulnerable to command execution prior to startup trust dialog

When using Claude Code with Yarn installed, Yarn config files can trigger code execution when running yarn --version. This could lead to a bypass of the directory trust dialog in Claude Code, as plugins and yarnPath could be executed prior to the user accepting the risks of working in an untruste...

Fedora 44 : kubernetes1.34 (2025-eeedae8757)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-eeedae8757 advisory. Automatic update for kubernetes1.34-1.34.2-1.fc44. Changelog Fri Nov 14 2025 Bradley G Smith - 1.34.2-1 - Update to release v1.34.2 - Resolves:...

Fedora 44 : cri-o1.33 (2025-fa02acfc0f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fa02acfc0f advisory. Automatic update for cri-o1.33-1.33.6-1.fc44. Changelog Tue Nov 11 2025 Bradley G Smith - 1.33.6-1 - Update to release 1.33.6 - Resolves: rhbz240759...

Fedora 44 : kubernetes1.31 (2025-a9a4d57353)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9a4d57353 advisory. Automatic update for kubernetes1.31-1.31.14-1.fc44. Changelog Wed Nov 12 2025 Bradley G Smith - 1.31.14-1 - Update to release v1.31.14 - Resolves:...

Fedora 44 : runc (2025-6a0f63aaab)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6a0f63aaab advisory. Automatic update for runc-1.3.3-1.fc44. Changelog Wed Nov 5 2025 Bradley G Smith - 2:1.3.3-1 - Update to release v1.3.3 - Resolves: rhbz2411664,...

Fedora 44 : varnish (2025-2ff6e32273)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2ff6e32273 advisory. Automatic update for varnish-7.7.3-2.fc44. Changelog Wed Oct 29 2025 Lubo Uhliarik - 7.7.3-2 - Add tmpfiles.d rules for /var directories bootc...

Fedora: Security Advisory (FEDORA-2025-3876147cc5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-53d4bfcda2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-7f2c510349)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-265201ce20)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 44 : avr-binutils (2025-005897ba3d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-005897ba3d advisory. Automatic update for avr-binutils-2.45-2.fc44. Changelog Thu Oct 16 2025 Michal Hlavinka - 1:2.45-2 - fix CVE-2025-11081: out-of-bounds read rhbz2400332...

Multiple RSUPPORT products may insecurely load Dynamic Link Libraries

Overview Multiple RSUPPORT products contain multiple vulnerabilities listed below. RemoteView PC Application Console vulnerable to uncontrolled search path element CWE-427 - CVE-2025-26859 RemoteCall Remote Support Program for Operator vulnerable to uncontrolled search path element CWE-427 -...

Fedora 44 : moby-engine (2025-a870881eff)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a870881eff advisory. Automatic update for moby-engine-28.5.1-1.fc44. Changelog Wed Oct 8 2025 Bradley G Smith - 28.5.1-1 - Update to release v28.5.1 - Resolves: rhbz2401164,...

EUVD-2013-4043

Malware in sbrugna...

EUVD-2020-28740

Malware in sbrugna...

EUVD-2005-3894

Malware in sbrugna...

Trend Micro Antivirus for Mac vulnerable to Local Privilege Escalation

Overview Trend Micro Incorporated has released a security update for Trend Micro Antivirus for Mac. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An unprivileged user may gain root access by exploiting a leftover file after...