Lucene search
K

7 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.8 views

Astra Linux - уязвимость в samba

A flaw was discovered in Samba, particularly in the handling of the front-end WINS hook: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets is inserted into shell commands and executed b...

10CVSS7.6AI score0.00486EPSS
Exploits2References2
OSV
OSV
added 2025/11/07 8:15 p.m.2 views

ALPINE-CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS7.1AI score0.00486EPSS
Exploits2References1
EUVD
EUVD
added 2025/11/07 7:42 p.m.2 views

EUVD-2025-38301

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS6.4AI score0.00486EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2025/11/07 7:42 p.m.2 views

CVE-2025-10230 Samba: command injection in wins server hook script

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS6.7AI score0.00486EPSS
Exploits2References3
OSV
OSV
added 2025/10/15 12:0 a.m.0 views

UBUNTU-CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS7.4AI score0.00486EPSS
Exploits2References4
Prion
Prion
added 2013/07/18 4:51 p.m.14 views

Authentication flaw

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets...

2.6CVSS7.3AI score0.00896EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2013/07/18 2:0 p.m.14 views

CVE-2013-4877

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets...

6.8AI score0.00896EPSS
Exploits0References3
Rows per page
Query Builder