Lucene search
+L

45752 matches found

BDU FSTEC
BDU FSTEC
added 2026/06/22 12:0 a.m.8 views

The vulnerability in the webfile_mgrc.ipl software for D-Link DNS-320 allows a hacker to execute arbitrary commands.

The vulnerability in the webfilemgrc.cgi script of the D-Link DNS-320 network storage software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

9CVSS6.3AI score0.05587EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.10 views

Amazon Linux 2023 : mariadb114, mariadb114-backup, mariadb114-client-utils (ALAS2023-2026-1845)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1845 advisory. During the SST the donor node is interpolating parameters that the joiner sent into the command line. Not all parameters were properly validated which could allow a malicious joiner to execute...

9.1CVSS6.4AI score0.0062EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/06/22 12:0 a.m.7 views

RHEL 9 : vim (RHSA-2026:28050)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28050 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: arbitrary command execution via modeline sandbox...

8.2CVSS7.3AI score0.00552EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/06/22 12:0 a.m.28 views

PT-2026-51386

Name of the Vulnerable Software and Affected Versions mise versions prior to 2026.3.10 Description mise processes .tool-versions files using the Tera template engine, which includes a registered exec function that allows for arbitrary command execution. In the default non-paranoid mode,...

9.6CVSS6AI score0.00383EPSS
SaveExploits0References7
Debian
Debian
added 2026/06/21 6:5 p.m.8 views

[SECURITY] [DLA 4639-1] libhttp-daemon-perl security update

Debian LTS Advisory DLA-4639-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón June 21, 2026 https://wiki.debian.org/LTS Package : libhttp-daemon-perl Version : 6.12-1+deb11u2 6.16-1+deb13u1deb12u1 CVE ID : CVE-2026-8450 Debian Bug : 1138050 A flaw was...

9.1CVSS6AI score0.01398EPSS
SaveExploits0
Debian
Debian
added 2026/06/21 4:50 p.m.24 views

[SECURITY] [DSA 6358-1] libhttp-daemon-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6358-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 21, 2026 https://www.debian.org/security/faq -...

9.1CVSS6AI score0.01398EPSS
SaveExploits0
OSV
OSV
added 2026/06/21 4:21 p.m.15 views

MAL-2026-6249 Malicious code in blinkit-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca70b0a6be36daf245deb50dd6b3595a9bfba29c62770e82365152a02832cf8 On npm install, the package's preinstall lifecycle hook runs curl against http://d8s0b82plbq3u5sb2vo0sb3a9obr4yjt7.oast.site/ and POSTs the installer...

6AI score
SaveExploits0References1
OSV
OSV
added 2026/06/21 4:4 p.m.19 views

MAL-2026-6253 Malicious code in zomato-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a12373009dd17131e45f4d20570904f2b8074367ee8b121e60a3ce5764fa00 The package's package.json declares a preinstall lifecycle hook that runs curl to POST the installer's hostname, whoami, current working directory, a...

6AI score
SaveExploits0References1
OSV
OSV
added 2026/06/21 2:16 p.m.10 views

PYSEC-2026-246

picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims...

7.8CVSS5.9AI score0.00276EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/06/21 1:26 p.m.9 views

CVE-2025-71357

picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims...

8.1CVSS6AI score0.00276EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/06/21 1:26 p.m.13 views

EUVD-2025-210293

picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims...

8.1CVSS6AI score0.00276EPSS
SaveExploits1References2
OSV
OSV
added 2026/06/20 1:10 p.m.13 views

MAL-2026-6239 Malicious code in atlasora-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33093da9f0bcf9358f3b00bd87e723d95267074539c72511ab58bff4172f092 The package declares a postinstall hook in package.json "postinstall": "node install.js" that auto-executes install.js on every npm install. install....

5.9AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/20 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-44691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Theia versions prior to 1.69.0, custom task definitions in workspace files e.g. .theia/tasks.json, .vscode/tasks.json could be executed without...

8.8CVSS6AI score0.00408EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/20 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-44688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context without distinguishing...

8.8CVSS6.1AI score0.00507EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/06/19 8:47 p.m.14 views

@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument

Summary A command injection vulnerability exists in @cyclonedx/cyclonedx-npm when the CLI is invoked with the --workspace option while the environment variable npmexecpath is unset or empty. User‑supplied --workspace values are passed to a subshell without proper sanitization, enabling attackers ...

8.5CVSS6.3AI score0.00161EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/06/19 7:35 p.m.12 views

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the propagation of unvalidated LABEL values from image configuration to container labels. An attacker can execute arbitrary commands on the host by...

9.4CVSS6.2AI score0.00176EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 7:35 p.m.13 views

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview github.com/containerd/containerd/pkg/cri/server is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer an...

9.4CVSS6.3AI score0.00176EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 7:35 p.m.9 views

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the propagation of unvalidated LABEL values from image configuration to container labels. An attacker can execute arbitrary commands on the host by...

9.4CVSS6.2AI score0.00176EPSS
SaveExploits0References2
Debian
Debian
added 2026/06/19 6:27 p.m.19 views

[SECURITY] [DSA 6354-1] libconfig-inifiles-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6354-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 19, 2026 https://www.debian.org/security/faq -...

8.6CVSS5.9AI score0.01068EPSS
SaveExploits0
NVD
NVD
added 2026/06/19 5:16 p.m.18 views

CVE-2026-56211

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC Scalable Video Coding layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer contex...

7.1CVSS0.00414EPSS
SaveExploits0References7
Rows per page
Query Builder