18804 matches found
CVE-2026-19873
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...
Linux Distros Unpatched Vulnerability : CVE-2026-19873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a...
Debian dla-4764 : libdbi-perl - security update
The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4764 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4764-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-78183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quotefloat. quotefloat allocates the length of the string + 1, which is the size of the bare...
CVE-2019-15107
CVE-2019-15107 CVE-2019-15107测试程序 webmin的这个远程命令执行漏洞，大致是perl中qx/…/导致命令执行，利用需要一定的特殊条件，复现的时候随手写了个图形化的利用程序。 值得注意的是，user值要是用的是一个假的用户，使用真实的root测试不成功，只有在发送的用户参数的值不是已知的Linux用户的情况下，展示进入才会到修改/etc/shadow的地方，从而触发命令注入漏洞 反弹shell可能需要编码，这可能需要修改代码...
Fedora 46 : perl-Net-OAuth (2026-96404091a4)
The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-96404091a4 advisory. Automatic update for perl-Net-OAuth-0.33-1.fc46. Changelog Thu Aug 27 2026 Xavier Bachelot - 0.33-1 - Update to 0.32 RHBZ2517683 - Fixes...
Linux Distros Unpatched Vulnerability : CVE-2026-63676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libyaml-perl - None Ubuntu Linux - Unknown description CVE-2026-63676 Note that Nessus relies on the presence of the package as reported by the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-Encode (UTSA-2026-093243)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093243 advisory. Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directo...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...
CVE-2026-78655
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...
CVE-2026-78655
Punk::Plugin::TOTP (Perl) versions before 0.05 allow an attacker to bypass the TOTP second-factor attempt limit by replaying a previously saved session cookie. Because Punk::Session stores the failure counter inside a signed client-side cookie, a saved cookie from before the failed attempts resto...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl contain a critical (CVSS 9.8) flaw in the recovery code verification path. The totp_use_recovery helper searches recovery records by code digest across all users, then performs an ownership check that compares user_id values through Perl's integer ...
CVE-2026-78619 Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...
ROOT-OS-DEBIAN-12-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root
Root has patched CVE-2026-7017 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-42497 CVE-2026-42497 in perl - Patched by Root
Root has patched CVE-2026-42497 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-8376 CVE-2026-8376 in perl - Patched by Root
Root has patched CVE-2026-8376 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2011-4116 CVE-2011-4116 in perl - Patched by Root
Root has patched CVE-2011-4116 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-48962 CVE-2026-48962 in perl - Patched by Root
Root has patched CVE-2026-48962 in the perl package for Root:Debian:12. Multiple fixed versions available...