153 matches found
Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-
Markdown Webmin 1.580 RCE Execution Guide Quick reference for executing authenticated Remote Code Execution RCE on Webmin 1.580 via the /file/show.cgi component. 1. Attack Machine Listener Run this command on your local machine to catch the incoming connection before executing the payload: rlwrap...
CVE-2020-8423
CVE-2020-8423 Research based on https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment hook.c is customized especially open vmlinux version 2.6.31...
Astra Linux – Vulnerability in Minzip
MiniZip in zlib version 1.3 has an integer overflow, resulting in a heap-based buffer overflow in zipOpenNewFileInZip464, which can occur due to a long filename, comment, or additional fields. NOTE: MiniZip is not a supported component of the zlib product. NOTE: pyminizip in versions 0.2.6 onward...
CVE-2026-51997
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...
PT-2026-97825
Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.16 through 0.1.38 Description A remote attacker can execute arbitrary code through the open function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
CVE-2026-51997
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...
GHSA-CV22-G7MW-8V73 NLTK CrubadanCorpusReader path traversal allows arbitrary file disclosure
NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. loadlangngrams joins the corpus root with crubadancode, the column-0 value read from the corpus table.txt mapping file, and opens the result with the builtin open rather than the pathsec-validated opener, s...
Malicious code in bigtime (PyPI)
Source: kam193 79fef30b8024966d3842e702f5f277b66d64b6a4a6af603c9eac0c720a4448d6 The package contains hidden code to overwrite the built-in "open" function and exfiltrate every write to opened files. Exfiltration watcher is also attached to other files in user's home directory. --- Category:...
MAL-2026-13712 Malicious code in bigtime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14cc45326877547d5297956e4c2b5719122bcef140db0d7959e1b4da94e58d7 The package presents itself as a time module wrapper, but its init.py invokes qwe900.init, which performs two exfiltration behaviors on import. First...
Malicious code in bigtime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14cc45326877547d5297956e4c2b5719122bcef140db0d7959e1b4da94e58d7 The package presents itself as a time module wrapper, but its init.py invokes qwe900.init, which performs two exfiltration behaviors on import. First...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the Open function, which uses raw http.Get and os.Open without proper host or scheme validation. An attacker can access internal network resources, cloud metadata endpoints, or read arbitrary local...
PT-2026-63293
Name of the Vulnerable Software and Affected Versions Gitea versions 1.22.x and earlier Description A Local File Inclusion issue exists in the restore-repo command when processing release.yml files from user-supplied archives. The DownloadURL field in release attachments is passed to the uri.Open...
Linux kernel fore200e function Data Compromise
The vulnerability of the fore200eopen function in the drivers/atm/fore200e.c file of the Linux kernel’s network adapter driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
PYSEC-2026-1579 InternLM LMDeploy code injection vulnerability
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has...
InternLM LMDeploy code injection vulnerability
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has...
Linux kernel drivers rapidio mport_cdev function heap buffer overflow DoS
The vulnerability of the mportcdevopen function in the drivers/rapidio/devices/riomportcdev.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
SUSE SLED15 / SLES15 Security Update : perl-Config-IniFiles (SUSE-SU-2026:2710-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2710-1 advisory. This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrit...
Important: perl-GD
Issue Overview: command injection via 2-arg open in makefilehandle CVE-2026-11526 Affected Packages: perl-GD Issue Correction: Run dnf update perl-GD --releasever 2023.12.20260622 or dnf update --advisory ALAS2023-2026-1890 --releasever 2023.12.20260622 to update your system. More information on...
EUVD-2026-36659
GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. GD::Image::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd |" or begins with a...
Linux Distros Unpatched Vulnerability : CVE-2026-11527
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle...