Lucene search
K

353 matches found

Positive Technologies
Positive Technologies
added yesterday2 views

PT-2026-46055

ParsedReport ChatGPT Translated Autotext: TI Report Analyser + ChatGPT + Auto Translate ------ В марте 2023 года был обнаружен вариант ботнета Gafgyt под названием C0XMO, использующий уязвимость CVE-2021-27137 в маршрутизаторах DD-WRT для распространения на различные архитектуры Linux. ВПО...

5.8AI score
Exploits1References2
GithubExploit
GithubExploit
added 2026/05/15 5:38 p.m.44 views

Exploit for CVE-2025-9074

🐚 docker-shell A lightweight, dependency-free bash script tha...

9.3CVSS6.1AI score0.01192EPSS
Exploits15
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copyfromkernelnofault can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copyfromkernelnofault can cause page...

7.8CVSS6.5AI score0.00013EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.7 views

uutils coreutils has an Unchecked Return Value Issue

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS5.4AI score0.00015EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/04/22 6:31 p.m.0 views

GHSA-WH8P-H9HW-X2MC uutils coreutils has an Unchecked Return Value Issue

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References3
CVE
CVE
added 2026/04/22 6:11 p.m.8 views

CVE-2026-26354

Dell PowerProtect Data Domain with DD OS Feature Release versions 7.7.1.0–8.6, LTS2025 8.3.1.0–8.3.1.10, and LTS2024 7.13.1.0–7.13.1.60 contains a stack-based Buffer Overflow vulnerability. An unauthenticated, remote attacker could potentially exploit this to achieve arbitrary command execution. ...

9.8CVSS6AI score0.00101EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2026/04/22 5:16 p.m.0 views

CVE-2026-35344

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS0.00015EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/04/22 5:16 p.m.1 views

CVE-2026-35344

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References2
CVE
CVE
added 2026/04/22 4:7 p.m.4 views

CVE-2026-35344

The CVE describes a flaw in the dd utility from uutils coreutils: when truncating files, it unconditionally calls Result::ok(), suppressing errors. This behavior mirrors GNU for special files like /dev/null but also hides failures on regular files or directories caused by full disks or read-only ...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/22 4:7 p.m.24 views

CVE-2026-35344 uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error Suppression

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/22 4:7 p.m.1 views

CVE-2026-35344

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/04/22 4:7 p.m.2 views

CVE-2026-35344

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS5.5AI score0.00015EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.3 views

PT-2026-34480

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-35344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References3
NVD
NVD
added 2026/04/17 9:16 a.m.0 views

CVE-2026-23775

Dell PowerProtect Data Domain appliances with Data Domain Operating System DD OS of Feature Release versions 8.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with remote access...

7.6CVSS0.00017EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/17 7:16 a.m.0 views

CVE-2026-23853

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a use of weak credentials vulnerability. An unauthenticated attacke...

8.4CVSS5.8AI score0.00016EPSS
Exploits0References2
NVD
NVD
added 2026/03/27 1:16 a.m.1 views

CVE-2026-33728

dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access ...

9.8CVSS0.00267EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/27 12:25 a.m.1 views

CVE-2026-33728 dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution

dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access ...

9.3CVSS6AI score0.00267EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/27 12:25 a.m.0 views

CVE-2026-33728

dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker with network access ...

9.3CVSS6AI score0.00267EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/03/27 12:25 a.m.6 views

CVE-2026-33728

dd-trace-java (Datadog APM for Java) versions 0.40.0 through before 1.60.2 contain an unsafe RMI instrumentation endpoint that deserializes data without serialization filters. On JDK 16 and earlier, an attacker with network access to a configured JMX/RMI port on an instrumented JVM could potentia...

9.8CVSS6AI score0.00267EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder