Lucene search
K

11 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/01 12:53 p.m.3 views

Malicious code in coinbase.net.api (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSV
OSV
added 2025/12/01 12:53 p.m.2 views

MAL-2025-191607 Malicious code in coinbase.net.api (NuGet)

--- -= Per source details. Do not edit below this line.=-...

6.8AI score
Exploits0References1
OSV
OSV
added 2022/05/24 5:6 p.m.27 views

GHSA-Q53J-P6R2-G2V4 SaltStack Salt is vulnerable to command injection

In SaltStack Salt before 2019.2.3, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

9.8CVSS9.8AI score0.17854EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2022/05/24 5:6 p.m.20 views

SaltStack Salt is vulnerable to command injection

In SaltStack Salt before 2019.2.3, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

9.8CVSS9.9AI score0.17854EPSS
Exploits0References7Affected Software1
Gitee
Gitee
added 2022/02/15 4:4 p.m.2 views

SpoolFool

This is a code analysis of the AddUser repository. Classification: Exploit module/toolkit targeting Windows systems. Primary CVE ID: Not explicitly stated, but the code appears to be related to the exploitation of a vulnerability in the Windows NetAPI32 library. Target product/service: Windows...

7.7AI score
Exploits0
OSV
OSV
added 2020/11/06 8:15 a.m.1 views

UBUNTU-CVE-2020-25592

In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH...

9.8CVSS7.3AI score0.44938EPSS
Exploits3References4
OpenVAS
OpenVAS
added 2020/03/19 12:0 a.m.28 views

openSUSE: Security Advisory for salt (openSUSE-SU-2020:0357-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.8AI score0.17854EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2020/01/17 2:15 a.m.30 views

CVE-2019-17361

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

9.8CVSS7.3AI score0.17854EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2020/01/17 1:16 a.m.40 views

CVE-2019-17361

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

9.8CVSS10AI score0.17854EPSS
Exploits0
Check Point Advisories
Check Point Advisories
added 2009/10/29 12:0 a.m.4 views

Microsoft Windows GDI+ .NET API Remote Code Execution (MS09-062; CVE-2009-2504)

A remote code execution vulnerability has been discovered in the Microsoft Windows GDI .NET API. The vulnerability is a result of an integer overflow in certain GDI+ APIs that are accessible from .NET Framework applications. A remote attacker may trigger this issue by convincing a user to open a...

9.3CVSS9.5AI score0.41378EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2009/10/15 12:0 a.m.278 views

MS09-062: Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488)

The remote host is running a version of Windows that is affected by multiple buffer overflow vulnerabilities when viewing TIFF, PNG, BMP, and Office files that could allow an attacker to execute arbitrary code on the remote host. Additionally, there is a GDI+ .NET API vulnerability that allows a...

9.3CVSS9.2AI score0.5418EPSS
Exploits6References9
Rows per page
Query Builder