297468 matches found
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...
CVE-2026-61477
Libvirt vulnerability CVE-2026-61477 affects the libvirt virtual network driver. The network XML parser does not strip newline characters from DNS TXT record values and SRV domain/target attributes, causing these values to be written verbatim into the dnsmasq configuration. This enables a user wh...
CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...
CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the...
Malicious code in mangomind-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6512bd1cea27977e679186d569d524555fdf0ed5ea9e4b965aa640b1ae8326cb src/index.js opens a persistent WebSocket to a hardcoded default relay at wss://relay.mangomindbd.com and dispatches on message types received from...
MAL-2026-13611 Malicious code in mangomind-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6512bd1cea27977e679186d569d524555fdf0ed5ea9e4b965aa640b1ae8326cb src/index.js opens a persistent WebSocket to a hardcoded default relay at wss://relay.mangomindbd.com and dispatches on message types received from...
Malicious code in f-termx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f050d397c72fdb9336deba1e2ca6758d04625323e7bb4746d8b61964cc671ae The package's main entrypoint index.js and src/server.js start an HTTP + Socket.IO server bound to 0.0.0.0 and are designed to be published to the...
MAL-2026-13610 Malicious code in f-termx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f050d397c72fdb9336deba1e2ca6758d04625323e7bb4746d8b61964cc671ae The package's main entrypoint index.js and src/server.js start an HTTP + Socket.IO server bound to 0.0.0.0 and are designed to be published to the...
CVE-2026-15570
An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue...
CVE-2026-15570
The CVE-2026-15570 entry describes an improper restriction of URL schemes/destinations in the SmartCenter browserseturl command of Telefunken TE24553B45V2DZ Smart TV (Vestel MB181 / Voltron181 / TiVo OS). A local-network attacker can cause the embedded browser to reach unintended loopback/interna...
EUVD-2026-54481
An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue...
CVE-2026-15570 Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command
An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue...
CVE-2026-15570 Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command
An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue...
Task4-Exploitation-System-Security
Task 4: Exploitation & System Security Cybersecurity & Ethi...
CVE-2026-66838
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can close the comment delimiter with / and extend the streamed...
Security update for libssh2_org
This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-58050: heap buffer overflow d...
Security update for libssh2_org
This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-55199: pre-authentication DoS...
MAL-2026-13605 Malicious code in yakuza0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9952a92dd18e2353ebb4f2d8064884e7be770d23770096af6dbe1844d8b5fd6 The package ships code that binds outbound network calls to a hardcoded non-standard host, https://registry-pxnpm.rdc.nfjbill.ren, from cli/index.js...