193394 matches found
FreeBSD : vifm -- Unverified Ownership (158544f8-cf02-11f1-b0f1-d0f4051da3a3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 158544f8-cf02-11f1-b0f1-d0f4051da3a3 advisory. https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SkX7Pmiofg reports: Vifm 0.8.1-beta through 0.14.4 reuses a...
PT-2026-122610
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project has...
NetScaler ADC and Gateway 14.1-73.36 Check
NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain an improper input validation vulnerability that permits unauthenticated command execution. The supplied offline tool assesses reported builds against applicable fixed versions...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-143711)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143711 advisory. internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have...
SonicWall SMA1000 12.5.0 OS Command Injection
SonicWall SMA1000 versions 12.4.3-03526 and earlier and 12.5.0-02952 and earlier contain an authenticated administrator OS command injection vulnerability that may result in remote code execution...
SUSE CVE-2026-113725
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing $... runs as commands in the...
SUSE CVE-2026-113726
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from 21.13.0 until 21.14.4, it escapes backslashes, dollar signs, and backticks only when BASHVERSION is set, so zsh...
SUSE CVE-2026-113732
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote, which uses POSIX shlex.quote even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or...
Exploit for Command Injection in Simple-Git_Project Simple-Git
simplegit-rce-check Standalone def...
EUVD-2026-105299
virtualenv: Xonsh activation literals depend on the script decoding codec...
GHSA-6W3R-XR62-4XCP virtualenv: Bash prompt values can change meaning under older compatibility modes
Summary Caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. Affected area Bash runs with compatibility level 4.2 and draws the...
virtualenv: Bash prompt values can change meaning under older compatibility modes
Summary Caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. Affected area Bash runs with compatibility level 4.2 and draws the...
DEBIAN-CVE-2026-115774
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
AZL-111416 CVE-2026-115774 affecting package python-twisted 22.10.0-7
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
CVE-2026-115774
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
CVE-2026-113951
If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s...
CVE-2026-115774
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
UBUNTU-CVE-2026-115774
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
CVE-2026-113951
If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s...
CVE-2026-113951
Versions of the Apple container prior to 1.5.0 are vulnerable to a security flaw where an attacker with write access to a container's filesystem can plant an exec credential plugin in /etc/kubernetes/admin.conf. When a user later pulls the cluster's kubeconfig onto a macOS host and runs kubectl, ...