110 matches found
podman: Arbitrary file write when importing OCI archive
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...
CVE-2024-28995
CVE-2024-28995 SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. INSTALL git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt USAGE Scan a single...
viper
This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...
PT-2026-93217
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...
Malicious code in originaldevelopmentstelemetry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...
Malicious code in 3layerdipstack4dhmdb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0ccaa499343ec1f18b5618c6f7e9c86899fee1d1e184e9cbf419add99187c0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-72878
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy's backup and restore pipeline constructs shell commands by directly interpolating user-controlled database fields into bash -c "..." and sh -c "..." strings, then executes them via childprocess.exec. An...
PT-2026-69923
Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description The backup and restore pipeline constructs shell commands by directly interpolating user-controlled database fields into bash -c and sh -c strings, which are then executed via the child process.exe...
CVE-2026-55115
The CVE-2026-55115 entry describes a Server-Side Request Forgery (SSRF) in the UniFi Protect Application that could allow a low-privilege, network-accessible attacker to escalate privileges on the host. The available sources state the affected component as the UniFi Protect Application and identi...
Johnson Controls CEM AC2000
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a standard user to escalate privileges on the host machine. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine...
CVE-2025-12556
An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary code within the context of the host machine...
EUVD-2017-14015
Malware in sbrugna...
EUVD-2018-17203
Malware in sbrugna...
EUVD-2021-21888
Malware in sbrugna...
EUVD-2021-2338
Malware in sbrugna...
EUVD-2020-0626
Malware in sbrugna...
EUVD-2018-17204
Malware in sbrugna...