305 matches found
CVE-2025-6723 Untrusted user data can lead to privilege escalation
Chef InSpec versions up to 5.23 and before 7.0.107 creates named pipes with overly permissive default Windows access controls. A local attacker may interfere with the pipe connection process and exploit the insufficient access restrictions to assume the InSpec execution context, potentially...
CVE-2025-6723
CVE-2025-6723 : Red Hat and NVD entries describe that Chef InSpec up to version 5.23 creates named pipes with overly permissive default Windows access controls. A local attacker could interfere with the pipe connection process and exploit insufficient access restrictions to assume the InSpec exec...
Chef InSpec authorization issue vulnerability
Chef InSpec is an open-source automation testing and compliance checking framework developed by Chef Inc. It aims to assist developers and operations teams in writing, running, and maintaining automated test scripts to verify the compliance and security of applications and infrastructure. Chef...
VulnCheck KEV: CVE-2025-8868
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token...
EUVD-2016-5326
Malware in sbrugna...
EUVD-2011-4998
Malware in sbrugna...
EUVD-2017-16212
Malware in sbrugna...
EUVD-2021-14363
Malware in sbrugna...
EUVD-2015-8438
Malware in sbrugna...
EUVD-2011-4997
Malware in sbrugna...
EUVD-2022-3332
Malicious code in bioql PyPI...
EUVD-2022-2410
Malicious code in bioql PyPI...
EUVD-2023-47091
Malicious code in bioql PyPI...
EUVD-2023-1968
Malicious code in bioql PyPI...
EUVD-2025-31570
Malicious code in bioql PyPI...
EUVD-2025-31571
Malicious code in bioql PyPI...
EUVD-2023-44657
Malicious code in bioql PyPI...
EUVD-2022-0784
Malicious code in bioql PyPI...