108 matches found
EUVD-2022-30447
Malicious code in bioql PyPI...
EUVD-2025-16999
Malicious code in bioql PyPI...
EUVD-2022-30446
Malicious code in bioql PyPI...
EUVD-2022-30444
Malicious code in bioql PyPI...
EUVD-2022-30445
Malicious code in bioql PyPI...
CVE-2025-34082
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker...
CVE-2025-34082
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker...
CVE-2025-34082 IGEL OS Secure Terminal and Secure Shadow Remote Code Execution
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker...
CVE-2025-34082
IGEL OS prior to 11.04.270 is affected by a command-injection in Secure Terminal and Secure Shadow caused by improper handling of PROXYCMD on TCP ports 30022 (Secure Terminal) and 5900 (Secure Shadow). An unauthenticated network attacker can inject commands leading to remote code execution with e...
CVE-2025-34082 IGEL OS Secure Terminal and Secure Shadow Remote Code Execution
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker...
CVE-2025-34082: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker...
PT-2025-27825 · Igel · Igel Os
Name of the Vulnerable Software and Affected Versions: IGEL OS versions prior to 11.04.270 Description: A command injection issue exists due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker with network...
IGEL OS security vulnerabilities
IGEL OS is a terminal operating system from the German company IGEL. A security vulnerability exists in IGEL OS versions prior to 11.04.270 that stems from improper input cleanup of the Secure Terminal and Secure Shadow services, which could lead to remote code execution...
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
CVE-2025-47827
In IGEL OS versions prior to 11, a cryptographic signature verification vulnerability in the igel-flash-driver module allows for a Secure Boot bypass . An attacker can leverage this flaw to mount a crafted root filesystem from an unverified SquashFS image, compromising the system's chain of trust...
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
IGEL OS security vulnerabilities
IGEL OS is a terminal operating system from the German company IGEL. A security vulnerability exists in versions prior to IGEL OS 11 that stems from improper signature verification and could lead to bypassing secure boot...