EUVD-2014-3645

Malware in sbrugna...

EUVD-2018-19601

Malware in sbrugna...

CVE-2014-3699

eDeploy has RCE via cPickle deserialization of untrusted data...

Deserialization of untrusted data

eDeploy has RCE via cPickle deserialization of untrusted data...

CVE-2014-3699

eDeploy has RCE via cPickle deserialization of untrusted data...

CVE-2014-3699

CVE-2014-3699 affects the Linux configuration/update tool eDeploy . The vulnerability is a deserialization flaw: untrusted data deserialized via Python’s cPickle , leading to remote code execution. Public references in the documents consistently describe an RCE impact without detailing specific e...

Updated calibre packages fix security vulnerability

Updated calibre package fixes security vulnerability: gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call...

[ASA-201803-8] calibre: arbitrary command execution

Arch Linux Security Advisory ASA-201803-8 ========================================= Severity: High Date : 2018-03-11 CVE-ID : CVE-2018-7889 Package : calibre Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-650 Summary ======= The package calibre before...