CVE-2026-39808

CVE-2026-39808 On November 2025, a critical vulnerability was discovered on Fortinet's FortiSandbox which allowed an unauthenticated attacker to execute commands in the underlying OS as root. The vulnerability was patched and finally made public on April 2026. This vulnerability affects...

CVE-2026-39808

🚨 FortiSandbox Root Sandbox Escape - CVE-2026-39808 🎯 Overview This repository contains a clean and well-documented Proof of Concept for CVE-2026-39808 — a critical unauthenticated command injection vulnerability in Fortinet FortiSandbox that allows sandbox escape and remote code execution as roo...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE Scanner — CVE-2026-39808 Unauthenticated OS Command Injection as root in Fortinet FortiSandbox Vulnerability • Installation • Usage • How It Works • Pipeline • Shodan Dorks • Disclaimer Vulnerability CVE-2026-39808 is a critical unauthenticated OS command injection vulnerability ...

SUSE CVE-2025-22242

Worker process denial of service through file read operation. .A vulnerability exists in the Master's “pubret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by...

Malicious code in hiura-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebb60061f29d4f4279bca1129ebfccefb928bd22364f26961205935ff71393f This is a fork of the Baileys WhatsApp library that adds undocumented behavior abusing the consumer's authenticated WhatsApp account for the author's...

EUVD-2008-4354

Malware in sbrugna...

EUVD-2008-2642

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2025-22242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Worker process denial of service through file read operation. .A vulnerability exists in the Master's pubret method which is exposed to all minions. The...

Improper Validation of Specified Type of Input

Overview salt is a new approach to infrastructure management built on a dynamic communication bus. Salt can be used for data-driven orchestration, remote execution for any infrastructure, configuration management for any app stack, and much more. Affected versions of this package are vulnerable t...

UBUNTU-CVE-2025-22242

Worker process denial of service through file read operation. .A vulnerability exists in the Master's “pubret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by...

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. Code-Projects Job Recruitment version 1.0 has an injection vulnerability that originates from the jid/limit parameter of the /parse/alledits.php file containing a SQL injection vulnerability...

[SECURITY] Fedora 36 Update: jid-0.7.6-10.fc36

JSON Incremental Digger is a very simple JSON querying tool. You can drill down JSON interactively by using filtering queries like jq...

Fedora: Security Advisory for jid (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: jid-0.7.6-9.fc35

JSON Incremental Digger is a very simple JSON querying tool. You can drill down JSON interactively by using filtering queries like jq...

Fedora: Security Advisory for jid (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: jid-0.7.6-9.fc36

JSON Incremental Digger is a very simple JSON querying tool. You can drill down JSON interactively by using filtering queries like jq...

DEBIAN-CVE-2015-2058

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...

CVE-2015-2058

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...

Code injection

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...

CVE-2015-2058

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...