98 matches found
p4wned
P4WNED CVE-2026-6043 针对 Perforce Helix Core 的安全研究工具与 Nuclei 模板。 研究文章: https://morganrobertson.net/p4wned/ 请阅读以上文章获取完整详情。 仅限授权目标使用。请仅在你自己的服务器上或获得明确书面许可后使用。 目标受众: Perforce 服务器管理员、渗透测试人员、安全工程师 2026年5月更新: Perforce 2026.1 已发布。此版本默认采用安全配置!非常高兴看到此版发布以保护开发者知识产权。在此了解更多。 注意:这些工具扫描的是由 CVE-2026-6043 导致的配置错误。...
Code Injection in Perforce Helix Core (CVE-2026-6902)
Executive Summary In this article, we disclose our latest findings we made on Perforce protocol P4 Helix Core between command line client and server, and reveal how a threat actor could leverage it to conduct attacks. This security issue affects P4 Helix Core before P4 Helix Core 2025.2 Patch 2,...
CVE-2026-6902
A Remote Code Execution vulnerability in P4 Helix Core Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks...
CVE-2026-6902 Code Injection in Perforce P4 (Helix Core)
A Remote Code Execution vulnerability in P4 Helix Core Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks...
CVE-2026-6902 Code Injection in Perforce P4 (Helix Core)
A Remote Code Execution vulnerability in P4 Helix Core Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks...
CVE-2026-6902
CVE-2026-6902 affects the Command-Line Client in Perforce P4 Server (Helix Core). The vulnerability is described as a code-injection issue in the Command-Line Client prior to the 2025.2 Patch 2 release, with fixes implemented in P4 Server to address the risk. The connected documents identify the ...
CVE-2026-6902: Improper Control of Generation of Code
A Remote Code Execution vulnerability in P4 Helix Core Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to address potential security risks...
Perforce Helix Core Server 安全漏洞
Perforce Helix Core Server is a centralized version control server offered by Perforce Corporation, designed for managing large-scale code and digital assets. Versions of Perforce Helix Core Server prior to 2026.1 contained security vulnerabilities. These vulnerabilities stemmed from insecure...
CVE-2023-45319
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service DoS via the commit function was identified. Reported by Jason Geffner...
CVE-2023-45849
An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner...
EUVD-2024-49529
Malicious code in bioql PyPI...
EUVD-2023-2088
Malicious code in bioql PyPI...
EUVD-2023-49613
Malicious code in bioql PyPI...
EUVD-2024-33053
Malicious code in bioql PyPI...
EUVD-2024-33413
Malicious code in bioql PyPI...
EUVD-2023-50119
Malicious code in bioql PyPI...
EUVD-2023-58044
Malicious code in bioql PyPI...
EUVD-2023-39766
Malicious code in bioql PyPI...