6 matches found
CVE-2026-55404
yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to 2026.7.4, the --write-link, --write-url-link, and --write-desktop-link options can write .url or .desktop shortcut files using attacker-controlled webpageurl or filename metadata without sufficient validation or escaping,...
EUVD-2015-4661
Malware in sbrugna...
EUVD-2015-0985
Malware in sbrugna...
EUVD-2024-3302
Malicious code in bioql PyPI...
Apache Win32 1.3.x/2.0.x - Batch File Remote Command Execution
source: https://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary commands on the host running the vulnerable software. It shou...