56 matches found
📄 Barracuda ESG TAR Filename Command Injection
This Metasploit module exploits CVE-2023-2868, a command injection vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the ESG processes TAR file attachments - filenames containing shell metacharacters backticks are passed directly to shell commands...
Libraesva ESG 4.5 < 5.0.31 / 5.1.20 / 5.2.31 / 5.3.16 / 5.4.8 / 5.5.7 Command Injection (CVE-2025-59689)
The version of Libraesva ESG installed on the remote host is affected by a command injection flaw as referenced in the CVE-2025-59689 advisory. The vulnerability is triggered by an improper sanitization mechanism when removing active code from specific compressed archive formats. An attacker can...
EUVD-2025-36886
Malicious code in esg-odf-common npm...
Malicious Package
Overview esg-odf-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-49083 Malicious code in esg-odf-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...
Malicious code in esg-odf-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...
EUVD-2025-36081
Malicious code in legacyesgodfcommon npm...
MAL-2025-48735 Malicious code in legacy_esg_odf_common (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c56f634d22583d4f5aa8a52eeab8e3d5c0659c0cbfd1a5a9b0a4741b02ca251d Any computer that has this package installed or running should be considered...
VulnCheck KEV: CVE-2025-59689
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For...
CVE-2025-59689
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For...
CVE-2025-59689
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For...
CVE-2025-59689
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For...
CVE-2025-59689
Libraesva ESG is affected by CVE-2025-59689. The vulnerability allows command injection via a specially crafted compressed email attachment, impacting ESG 4.5 through 5.5.x prior to fixed versions. Affected fixes are: ESG 5.0.31, ESG 5.1.20, ESG 5.2.31, ESG 5.4.8, and ESG 5.5.7 (with older 4.5–5....
PT-2025-38625
Name of the Vulnerable Software and Affected Versions Libraesva Email Security Gateway versions 4.5 through 5.5.x before 5.5.7 Libraesva Email Security Gateway version 5.0 through 5.0.31 Libraesva Email Security Gateway version 5.1 through 5.1.20 Libraesva Email Security Gateway version 5.2 throu...
Malicious code in @zalastax/nolb-esg (npm)
The package @zalastax/nolb-esg was found to contain malicious code...
MAL-2025-11294 Malicious code in @zalastax/nolb-esg (npm)
The package @zalastax/nolb-esg was found to contain malicious code...
Sustainability and ESG: Understanding the Difference and Why It Matters
...
Our People and Our Growth: Key Drivers of Akamai’s ESG Strategy
...
Recognizing Progress and Living Our Values: Akamai’s 2023 ESG Impact Report
...
CVE-2023-7102
Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic...