Lucene search
K

175 matches found

Github Security Blog
Github Security Blog
added 2026/05/14 8:56 p.m.8 views

utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

Summary The substituteutcpargs method in clicommunicationprotocol.py inserts user-controlled toolargs values directly into shell command strings without any sanitization or escaping. These commands are then executed via /bin/bash -c Unix or powershell.exe -Command Windows, allowing an attacker to...

8.3CVSS6AI score0.00015EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/05/14 8:14 p.m.2 views

EUVD-2026-30475

python-utcp is the python implementation of UTCP. Prior to 1.1.3, the substituteutcpargs method in clicommunicationprotocol.py inserts user-controlled toolargs values directly into shell command strings without any sanitization or escaping. These commands are then executed via /bin/bash -c Unix o...

8.3CVSS5.9AI score0.00015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/05/04 9:18 a.m.2 views

CVE-2026-6870

A flaw was found in Wireshark. A user processing a specially crafted GSM RP protocol dissector file or network traffic could trigger a crash, leading to a denial of service. Mitigation To mitigate this issue, avoid opening untrusted network capture files or analyzing network traffic from untruste...

5.5CVSS5.7AI score0.00004EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/14 12:0 a.m.3 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition in the nfcllcpsenduiframe function, potentially leading to memory leaks...

5.5CVSS5.8AI score0.00018EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/01/09 11:29 a.m.6 views

CVE-2021-27503

Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the application layer of the communication protocol between the Ypsomed mylife App and mylife Cloud credentials based on...

5.8CVSS6.8AI score0.00148EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-14257

Malware in sbrugna...

5.8CVSS5.1AI score0.00148EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-19785

Malware in sbrugna...

5.7CVSS5.8AI score0.00094EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-19782

Malware in sbrugna...

5.7CVSS5.8AI score0.00089EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-26174

Malware in sbrugna...

8.2CVSS8.1AI score0.00107EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-6629

Malware in sbrugna...

9.8CVSS9.5AI score0.03006EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-21111

Malicious code in bioql PyPI...

6.8CVSS6.8AI score0.00173EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-35605

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00064EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-37541

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00111EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-12672

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.00447EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-21112

Malicious code in bioql PyPI...

9CVSS7.8AI score0.06569EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-37538

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00106EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-21110

Malicious code in bioql PyPI...

4.8CVSS6.8AI score0.00201EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-37537

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01696EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2025/09/21 1:2 a.m.2 views

tipc: fix kernel warning when sending SYN message

...

5.5CVSS7AI score0.00013EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/07/13 6:22 a.m.3 views

CVE-2025-30023

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack...

9CVSS7.9AI score0.06569EPSS
Exploits0References1
Rows per page
Query Builder