334 matches found
EUVD-2025-204957
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in PostgreSQL Init Script Filename handling allows users with application/service management permissions to execute...
PT-2025-52856
Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.451 Description Coolify is a self-hostable tool for managing servers, applications, and databases. An authenticated command injection issue exists in the File Storage Directory Mount Path functionality. Use...
CVE-2025-65199 Windscribe for Linux 'changeMTU' local privilege escalation
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8...
CVE-2025-65199 Windscribe for Linux 'changeMTU' local privilege escalation
A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8...
CVE-2025-65363
Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2025-64444
CVE-2025-64444 affects NCP-HG100 (1.4.48.16 and earlier). The issue is an OS command injection due to improper neutralization of special elements in commands, allowing a remote attacker who has authenticated access to the management page to execute arbitrary OS commands with root privileges. Red ...
CVE-2025-55810
A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...
Alaga Home Security WiFi Camera 安全漏洞
Alaga Home Security WiFi Camera is a series of home webcams from Alaga USA. A security vulnerability exists in Alaga Home Security WiFi Camera that originates from a physical attacker being able to execute root commands via a specifically named SD card script file...
PT-2025-46892
🚨 CVE-2025-55810 A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card. 🎖@cveNotify...
CVE-2025-55810
A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...
CVE-2025-55810
A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...
EUVD-2019-15032
Malware in sbrugna...
EUVD-1999-0204
Malware in sbrugna...
EUVD-2016-8341
Malware in sbrugna...
EUVD-2020-25520
Malware in sbrugna...
EUVD-1999-0088
Malware in sbrugna...
EUVD-2019-7196
Malware in sbrugna...