CleverControl 安全漏洞

CleverControl is an employee computer monitoring software from CleverControl USA. A security vulnerability exists in CleverControl version 11.5.1041.6, which stems from a failure to validate TLS server certificates during installation, and could lead to man-in-the-middle attacks and remote code...

Passbolt Api Remote code execution

Passbolt provides a way for system administrators to generate a PGP key for the server during installation. The wizard requests a username, an e-mail address and an optional comment. No escaping or verification is done by Passbolt, effectively allowing a user to inject bash code. The impact is ve...

PT-2024-40250 · Passbolt · Passbolt

Name of the Vulnerable Software and Affected Versions: Passbolt affected versions not specified Description: The issue allows a user to inject bash code during the installation stage of Passbolt, as the system does not perform escaping or verification on the input provided for the username, e-mai...