Lucene search
+L

3 matches found

osv_alpine
osv_alpine
•added 2026/04/24 5:16 p.m.•21 views

ALPINE-CVE-2026-41411

Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filena...

6.6CVSS6.5AI score0.00501EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2026/03/23 12:00 a.m.•158 views

📄 Barracuda ESG TAR Filename Command Injection

This Metasploit module exploits CVE-2023-2868, a command injection vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the ESG processes TAR file attachments - filenames containing shell metacharacters backticks are passed directly to shell commands...

9.8CVSS9.1AI score0.86841EPSS
SaveExploits3
osv_debian
osv_debian
•added 2015/12/17 7:59 p.m.•9 views

DEBIAN-CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

7.5CVSS7.8AI score0.10575EPSS
SaveExploits0References1
Rows per page
Query Builder