Lucene search
+L

4 matches found

OSV
OSV
added 2026/07/09 10:16 p.m.12 views

MAL-2026-10100 Malicious code in proxy-check-i (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da390c130eb840eb129a5d43faf0a64a0f0f602070243613aa0e2f8ea8f6d04 The package advertises itself as a wrapper for a 'qsshd executable' but the bundled Go binary is a reverse-SSH daemon that grants a remote operator...

6.3AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/11/22 10:15 p.m.5 views

CVE-2023-49102

NZBGet 21.1 allows authenticated remote code execution because the unarchive programs 7za and unrar preserve executable file permissions. An attacker with the Control capability can execute a file by setting the value of SevenZipCommand or UnrarCmd. NOTE: This vulnerability only affects products...

8.8CVSS6.5AI score0.01501EPSS
SaveExploits1References3
Prion
Prion
added 2023/11/22 10:15 p.m.15 views

Remote code execution

NZBGet 21.1 allows authenticated remote code execution because the unarchive programs 7za and unrar preserve executable file permissions. An attacker with the Control capability can execute a file by setting the value of SevenZipCommand or UnrarCmd. NOTE: This vulnerability only affects products...

6.5CVSS8AI score0.01501EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/11/22 12:0 a.m.93 views

CVE-2023-49102

NZBGet 21.1 allows authenticated remote code execution because the unarchive programs 7za and unrar preserve executable file permissions. An attacker with the Control capability can execute a file by setting the value of SevenZipCommand or UnrarCmd. NOTE: This vulnerability only affects products...

7.8AI score
SaveExploits0References4
Rows per page
Query Builder