opentsdb_key_cmd_injection

opentsdbkeycmdinjection An exploit for OpenTSDB = 2.4.1 cmd injection CVE-2023-36812/CVE-2023-25826 written in Fortran About This is an exploit for a command injection vulnerability in OpenTSDB verions 2.4.1 and prior CVE-2023-36812/CVE-2023-25826. The exploit is written in modern Fortran and...

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

[SECURITY] Fedora 45 Update: ocaml-lacaml-11.1.1-10.fc45

This OCaml-library interfaces the BLAS-library Basic Linear Algebra Subroutines and LAPACK-library Linear Algebra routines, which are written in FORTRAN. This allows people to write high-performance numerical code for applications that need linear algebra...

Fedora 45 : libwignernj (2026-8d270f3d39)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8d270f3d39 advisory. Automatic update for libwignernj-0.7.0-6.fc45. Changelog Thu Jul 23 2026 Susi Lehtola - 0.7.0-6 - Fix gating on BR: libquadmath-devel. Thu Jul 23 2026 Susi...

PYSEC-2026-1783 Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length

Summary Picklescan uses the numpy.f2py.crackfortran.evallength function a NumPy F2PY helper to execute arbitrary Python code during unpickling. Details Picklescan fails to detect a malicious pickle that uses the gadget numpy.f2py.crackfortran.evallength in reduce, allowing arbitrary command...

CVE-2025-71372 Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling...

net.sourceforge.pmd:pmd-cpp (5.5.3), net.sourceforge.pmd:pmd-cs (5.5.3) +23 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.5.3)

net.sourceforge.pmd:pmd-core MAVEN version 5.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.5.3 - net.sourceforge.pmd:pmd-cs 5.5.3 - net.sourceforge.pmd:pmd-dist 5.5...

com.astutebits:jsquint-maven-plugin (>=0.1.0, <=0.3.0), com.astutebits:jsquint-pmd (>=0.1.0, <=0.3.0) +26 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.4.1)

net.sourceforge.pmd:pmd-core MAVEN version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.astutebits:jsquint-maven-plugin =0.1.0, =0.1.0, =0.15.4, =0.15.4, =0.15.4, =1.7, =0.0.1, =0.8.3,...

com.samsungsds.analyst:code-analyst (>=2.5.0, <=2.5.1), net.sourceforge.pmd:pmd-cpp (5.4.6) +20 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.4.6)

net.sourceforge.pmd:pmd-core MAVEN version 5.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.samsungsds.analyst:code-analyst =2.5.0, =2.5.1 - net.sourceforge.pmd:pmd-cpp 5.4.6 -...

net.sourceforge.pmd:pmd-cpp (5.6.1), net.sourceforge.pmd:pmd-cs (5.6.1) +27 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.6.1)

net.sourceforge.pmd:pmd-core MAVEN version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.6.1 - net.sourceforge.pmd:pmd-cs 5.6.1 - net.sourceforge.pmd:pmd-dist 5.6...

net.sourceforge.pmd:pmd-cpp (5.3.2), net.sourceforge.pmd:pmd-cs (5.3.2) +17 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.3.2)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.3.2 - net.sourceforge.pmd:pmd-cs 5.3.2 - net.sourceforge.pmd:pmd-dist 5.3...

net.sourceforge.pmd:pmd-cpp (5.5.6), net.sourceforge.pmd:pmd-cs (5.5.6) +21 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.5.6)

net.sourceforge.pmd:pmd-core MAVEN version 5.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.5.6 - net.sourceforge.pmd:pmd-cs 5.5.6 - net.sourceforge.pmd:pmd-dist 5.5...

net.sourceforge.pmd:pmd-cpp (5.3.0), net.sourceforge.pmd:pmd-cs (5.3.0) +17 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.3.0)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.3.0 - net.sourceforge.pmd:pmd-cs 5.3.0 - net.sourceforge.pmd:pmd-dist 5.3...

net.sourceforge.pmd:pmd-cpp (5.3.6), net.sourceforge.pmd:pmd-cs (5.3.6) +16 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.3.6)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.3.6 - net.sourceforge.pmd:pmd-cs 5.3.6 - net.sourceforge.pmd:pmd-dist 5.3...

net.sourceforge.pmd:pmd-cpp (5.6.0), net.sourceforge.pmd:pmd-cs (5.6.0) +26 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.6.0)

net.sourceforge.pmd:pmd-core MAVEN version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.6.0 - net.sourceforge.pmd:pmd-cs 5.6.0 - net.sourceforge.pmd:pmd-dist 5.6...

net.sourceforge.pmd:pmd-cpp (5.4.0), net.sourceforge.pmd:pmd-cs (5.4.0) +17 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.4.0)

net.sourceforge.pmd:pmd-core MAVEN version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.4.0 - net.sourceforge.pmd:pmd-cs 5.4.0 - net.sourceforge.pmd:pmd-dist 5.4...

com.noveogroup.android.check:com.noveogroup.android.check.gradle.plugin (>=1.2.1, <=1.2.3), com.noveogroup.android:check (>=1.2.1, <=1.2.3) +21 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.3.4)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.noveogroup.android.check:com.noveogroup.android.check.gradle.plugin =1.2.1, =1.2.1, =0.13.1, =0.13....

net.sourceforge.pmd:pmd-cpp (5.2.2), net.sourceforge.pmd:pmd-cs (5.2.2) +12 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.2.2)

net.sourceforge.pmd:pmd-core MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.2.2 - net.sourceforge.pmd:pmd-cs 5.2.2 - net.sourceforge.pmd:pmd-dist 5.2...

net.sourceforge.pmd:pmd-cpp (5.3.1), net.sourceforge.pmd:pmd-cs (5.3.1) +16 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.3.1)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.3.1 - net.sourceforge.pmd:pmd-cs 5.3.1 - net.sourceforge.pmd:pmd-dist 5.3...

net.sourceforge.pmd:pmd-cpp (5.4.3), net.sourceforge.pmd:pmd-cs (5.4.3) +19 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.4.3)

net.sourceforge.pmd:pmd-core MAVEN version 5.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-cpp 5.4.3 - net.sourceforge.pmd:pmd-cs 5.4.3 - net.sourceforge.pmd:pmd-dist 5.4...