CVE-2026-95725 Authenticated Local Command Injection Vulnerability in the VIA Client for Linux

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system...

EUVD-2026-116202

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system...

CVE-2026-95725

A command injection vulnerability exists in the VIA client for Linux . This flaw allows a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system. No specific details regarding the root cause, affected versions, or remediation are provided in th...

CVE-2026-119025

A flaw was found in the open package. This vulnerability allows an attacker to achieve arbitrary code execution on systems running Windows or Windows Subsystem for Linux WSL. The issue occurs because the package fails to properly sanitize input URLs before passing them to PowerShell. By providing...

CVE-2026-95725: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A command injection vulnerability exists in the VIA client for Linux

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system...

rustproofing-linux

Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...

MAL-009

MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux In Zip for Linux, the “-TT” flag can be used to run arbitrary system commands. Due to the dangerous nature of this flag, it must always be used at the same time as the “-T” flag. By using a flag chaining attack, attackers that should...

CVE-2026-115904

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, leading to OS Command Injection via the openExternalLinks routine in utils.js. An attacker who controls a target URL can...

CVE-2026-115904 Topluyo Desktop for Linux has an OS Command Injection issue

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, leading to OS Command Injection via the openExternalLinks routine in utils.js. An attacker who controls a target URL can...

CVE-2026-115904 Topluyo Desktop for Linux has an OS Command Injection issue

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, leading to OS Command Injection via the openExternalLinks routine in utils.js. An attacker who controls a target URL can...

CVE-2026-115904 Topluyo Desktop for Linux has an OS Command Injection issue

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, leading to OS Command Injection via the openExternalLinks routine in utils.js. An attacker who controls a target URL can...

CVE-2026-115904

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, leading to OS Command Injection via the "openExternalLinks" routine in "utils.js". An attacker who controls a target URL can...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux enables local privilege escalation . This issue specifically affects installations that are managed by a Veeam Backup & Replication instance. The root cause is associated with an Untrusted Search Path (CWE-426). No specific exploit information or remediati...

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

EUVD-2026-111125

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

PT-2026-126652

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

CVE-2026-105477: Untrusted Search Path

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected...

Azure App Service for Linux Authentication Bypass RCE

The vulnerability of the Azure App Service for Linux platform for deploying, scaling, and administering web applications is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to perform a sanity check on ixattrnid in sanitycheckinode Syzbot reports a kernel bug as follows: F2FS-fs loop0: Mounted with checkpoint version = 48b305e4...