EUVD-2018-19601

Malware in sbrugna...

EUVD-2014-3645

Malware in sbrugna...

CVE-2014-3699

eDeploy has RCE via cPickle deserialization of untrusted data...

Deserialization of untrusted data

eDeploy has RCE via cPickle deserialization of untrusted data...

CVE-2014-3699

CVE-2014-3699 affects the Linux configuration/update tool eDeploy . The vulnerability is a deserialization flaw: untrusted data deserialized via Python’s cPickle , leading to remote code execution. Public references in the documents consistently describe an RCE impact without detailing specific e...

CVE-2014-3699

eDeploy has RCE via cPickle deserialization of untrusted data...

PT-2019-7103

Name of the Vulnerable Software and Affected Versions eDeploy affected versions not specified Description The issue allows for remote code execution RCE through the deserialization of untrusted data using cPickle. Recommendations At the moment, there is no information about a newer version that...

CVE-2014-3699: Deserialization of Untrusted Data

eDeploy has RCE via cPickle deserialization of untrusted data...

Updated calibre packages fix security vulnerability

Updated calibre package fixes security vulnerability: gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call...

[ASA-201803-8] calibre: arbitrary command execution

Arch Linux Security Advisory ASA-201803-8 ========================================= Severity: High Date : 2018-03-11 CVE-ID : CVE-2018-7889 Package : calibre Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-650 Summary ======= The package calibre before...