EUVD-2026-52921

Google::Auth versions before 0.06 for Perl run a command named in an externalaccount credentials JSON via an ungated system call. The Pluggable subclass reads credentialsource.executable.command from the credentials JSON and runs it as system$command, a single argument call that passes the whole...

CVE-2026-6196

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and...

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda CH22 router software allows a attacker to cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda CH22 router’s microprogramming system lies in the copying of buffers without checking the size of the input data when processing the cmdinput parameter. Exploiting this vulnerability could allow a remote attacker to...

Amazon Linux 2 : NetworkManager-libreswan (ALAS-2024-2703)

The version of NetworkManager-libreswan installed on the remote host is prior to 1.2.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2703 advisory. A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to...

CVE-2024-9050 Networkmanager-libreswan: local privilege escalation via leftupdown

A flaw was found in the libreswan client plugin for NetworkManager NetkworkManager-libreswan, where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading t...

Vembu BDR Suite Command Injection Vulnerability

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that arises from a network system or product that does not properly filter specific elements of externally entered data during the construction of an executable command. An attacker...

Foxit Launches 'Safe Mode' to Counter PDF Attacks

Foxit Corp has added new security features to its alternative PDF reader software to help thwart recent malware attacks that exploit the “/launch” feature. With Foxit PDF Reader Version 3.3, the company has added a Safe Mode that blocks external commands from being executed by the software. The...