28058 matches found
Command Injection
Overview TkEasyGUI is a TkEasyGUI is simple GUI Library for Python3 with Tkinter Affected versions of this package are vulnerable to Command Injection via improper neutralization of special elements in the popupnotify method. An attacker can execute arbitrary operating system commands by sending...
TkEasyGUI operating system command injection vulnerability
TkEasyGUI is a GUI library in Python by the individual developer kujirahand. An operating system command injection vulnerability exists in TkEasyGUI versions prior to 1.0.22, which stems from improper neutralization of a special element and could allow a remote, unauthenticated attacker to execut...
Linux netif_napi_del() DoS
The vulnerability of the netifnapidel function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Important Photon OS Security Update - PHSA-2025-4.0-0865
Updates of 'libsoup' packages of Photon OS have been released...
CVE-2024-49739
In MMapVAccess of pmros.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-23261
NVIDIA Cumulus Linux and NVOS contain a log information disclosure vulnerability where hashed user passwords are not properly suppressed in log files, potentially exposing them to unauthorized users. Root cause: sensitive password hashes are logged instead of being hidden. Impact: information dis...
CVE-2025-23261
NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users...
GHSA-67MF-3CR5-8W23 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips, cassandra-fips, elasticsearch...
CVE-2025-7388 Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface
It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...
CVE-2025-7388 Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface
It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...
Unexpected paths returned from LookPath in os/exec
...
Moderate Photon OS Security Update - PHSA-2025-5.0-0613
Updates of 'mariadb' packages of Photon OS have been released...
Google Wear OS security vulnerabilities
Google Wear OS is a Google-developed operating system from Google, Inc. in the United States, specifically designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from a lack of permission checking, which could lea...
Google Wear OS security vulnerabilities
Google Wear OS is a Google-developed operating system from Google, Inc. in the United States, specifically designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from a logic error that could lead to the enabling ...
Moderate Photon OS Security Update - PHSA-2025-5.0-91-0613
Updates of 'mariadb' packages of Photon OS have been released...
CVE-2025-56498
An OS command injection vulnerability exists in the PLDT WiFi Router's Prolink PGN6401V (Firmware version 8.1.2 ) web management interface. The flaw occurs because the ping6.asp page submits the pingAddr parameter to the /boaform/formPing6 endpoint without proper sanitization. An authenticated at...
Photon OS 4.0: Grub2 PHSA-2025-4.0-0861
An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0861. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2025-47421: Improper Neutralization of Argument Delimiters in a Command
Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP command sent via SSH login string can lead...
Photon OS 4.0: Shim PHSA-2025-4.0-0861
An update of the shim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0861. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
