11 matches found
Malicious code in coinbase.net.api (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-191607 Malicious code in coinbase.net.api (NuGet)
--- -= Per source details. Do not edit below this line.=-...
GHSA-Q53J-P6R2-G2V4 SaltStack Salt is vulnerable to command injection
In SaltStack Salt before 2019.2.3, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...
SaltStack Salt is vulnerable to command injection
In SaltStack Salt before 2019.2.3, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...
SpoolFool
This is a code analysis of the AddUser repository. Classification: Exploit module/toolkit targeting Windows systems. Primary CVE ID: Not explicitly stated, but the code appears to be related to the exploitation of a vulnerability in the Windows NetAPI32 library. Target product/service: Windows...
UBUNTU-CVE-2020-25592
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH...
openSUSE: Security Advisory for salt (openSUSE-SU-2020:0357-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-17361
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...
CVE-2019-17361
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...
Microsoft Windows GDI+ .NET API Remote Code Execution (MS09-062; CVE-2009-2504)
A remote code execution vulnerability has been discovered in the Microsoft Windows GDI .NET API. The vulnerability is a result of an integer overflow in certain GDI+ APIs that are accessible from .NET Framework applications. A remote attacker may trigger this issue by convincing a user to open a...
MS09-062: Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488)
The remote host is running a version of Windows that is affected by multiple buffer overflow vulnerabilities when viewing TIFF, PNG, BMP, and Office files that could allow an attacker to execute arbitrary code on the remote host. Additionally, there is a GDI+ .NET API vulnerability that allows a...