actoolkit (>=2.3.0, <=2.6.0), airbyte-api (>=0.1.0, <=0.11.2) +221 more potentially affected by CVE-2025-50181 via urllib3 (1.26.12)

urllib3 PYPI version 1.26.12 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - actoolkit =2.3.0, =0.1.0, =1.1.2, =22.8.23, =2.1.14, =0.5.3, =0.5.3, =0.0.1, =0.2.0, =1.0.2, =1.0.0, =3.9.0, =0.0.1.dev0, =1.0.0.dev6 and more...

aws-service-catalog-factory (>=0.27.1, <=0.31.0), aws-service-catalog-puppet (>=0.45.0, <=0.50.3) +62 more potentially affected by CVE-2025-50181 via urllib3 (1.25.6)

urllib3 PYPI version 1.25.6 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - aws-service-catalog-factory =0.27.1, =0.45.0, =0.1.0, =1.0.1, =0.0.2, =3.0.1, =0.2.0, =0.0.1, =0.0.1, =0.0.5 and more Source cves: CVE-2025-50181...

akc-mamba (>=2.0.1, <=2.0.2), azure-cli (2.0.64) +60 more potentially affected by CVE-2025-50181 via urllib3 (1.24.2)

urllib3 PYPI version 1.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - akc-mamba =2.0.1, =0.0.0, =0.1.9, =1!20190428.193217.0, =2019.4.26.2, =0.0.0, =0.0.21, =2.17.0, =1.0.1, =1.0.11, =1.0.1, =5.7.2, =0.7.1, =1.0.1 a...

CVE-2025-5981

OSV-SCALIBR is affected by a path traversal vulnerability in its unpack() function used for container images, exploitable when the CLI flag --remote-image is used on untrusted images. The issue allows arbitrary file write on the host as the OSV-SCALIBR user. Several sources (GitHub commit referen...

📄 Palo Alto PAN-OS CLI Crash

This Metasploit module triggers a denial-of-service condition in the CLI of Palo Alto PAN-OS by sending an overly long input after authentication. This module requires Metasploit Framework and compatible Ruby. require 'msf/core' require 'net/ssh' class MetasploitModule 'Palo Alto PAN-OS CLI Crash...

CVE-2025-4230

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this...

CVE-2025-4230

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this...

CVE-2025-4230

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this...

CVE-2025-4230: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this...

CVE-2025-4230 PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this...

CVE-2025-4230 PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this...

@dm3-org/dm3-cli (1.3.0) potentially affected by unknown CVE via ccip-resolver (0.2.10)

ccip-resolver NPM version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on ccip-resolver and may be impacted: - @dm3-org/dm3-cli 1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-5026...

CVE-2025-5897

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression...

PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this...

Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h15 / 10.2.x < 10.2.13-h7 / 11.1.x < 11.1.6-h14 / 11.2.x < 11.2.6 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h15, 10.2.x prior to 10.2.13-h7, 11.1.x prior to 11.1.6-h14, or 11.2.x prior to 11.2.6. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS...

CVE-2023-29184

An incomplete cleanup vulnerability CWE-459 in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker to add SSH key files on the system silently via crafted CLI requests...

Regular Expression Denial Of Service (ReDoS)

@vue/cli-plugin-pwa is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to unsafe regex handling in the HtmlPwaPlugin component of the Markdown code handler, which can be exploited remotely to degrade performance...

Fortinet FortiOS and Fortinet FortiProxy security vulnerabilities

Fortinet FortiOS and Fortinet FortiProxy are both products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content...

SSH key is added even if operation is aborted

An incomplete cleanup vulnerability CWE-459 in FortiOS & FortiProxy may allow a VDOM privileged attacker to add SSH key files on the system silently via crafted CLI requests...

Fortinet Fortigate SSH key is added even if operation is aborted (FG-IR-23-008)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-008 advisory. - An incomplete cleanup vulnerability CWE-459 in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2...