OESA-2026-3472 dracut security update

dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well ...

CVE-2025-14601

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or...

EUVD-2025-210747

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or...

CVE-2025-14601 vsDesk Task Scheduler OS Command Injection

An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operations, expose sensitive data, or...

CVE-2025-14601

vsDesk task scheduler passes unsanitized input to OS commands; an authenticated admin can inject arbitrary commands (CVSS 8.6 High). Patch available in versions 14.0101 and later from vendor https://vsdesk.ru/. No in-the-wild exploitation reported. Advisory: https://github.com/klsecservices/Advis...

CVE-2026-76254

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

Malicious code in @httttt/mcp-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee4beb2634f91de84901fbeb18674445c67c33a45c93a6509f72e03fe1a01b6 The package registers an MCP tool named execcommand that accepts a command string argument from the connected MCP client and passes it directly to...

GO-2026-6185 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2022-0536 vulnerabilities

Vulnerabilities for packages: arangodb...

GHSA-332R-8PMF-8M9P vulnerabilities

Vulnerabilities for packages: wget...

GHSA-FXF9-RXPJ-26GX vulnerabilities

Vulnerabilities for packages: wget...

GO-2026-6185 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-66140 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-40687 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-X8X4-4G6X-CX4H vulnerabilities

Vulnerabilities for packages: exim...

GHSA-9VJP-V76F-G363 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2026-55832 vulnerabilities

Vulnerabilities for packages: ascan...

EUVD-2026-63136

A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...