CVE-2025-69604

CVE-2025-69604 描述 此漏洞与 CVE-2025-61229 中描述的漏洞类似 —— 攻击者可以编辑任务模板，从而使 SuperDuper 备份任务安装任意软件包。随后，该软件包可以以 root 用户身份、并具备最高级别的隐私权限（完全磁盘访问）运行 shell 脚本。 参考 SuperDuper 安全更新 v3.12 CVE-2025-69604 CVSS 3.1 评分：NVD 评分待定。 缓解措施 为避免此漏洞，请删除 SuperDuper! 应用程序，或应用 3.12 更新。 免责声明 本漏洞分析及概念验证仅供教育目的使用。请自行承担使用风险。 高层摘要 在我先前对...

CVE-2026-19843

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-25603

The CVE-2026-25603 issue is a path traversal vulnerability in Linksys MR9600 and MX4200. Affected products and versions are MR9600 1.0.4.205530 and MX4200 1.0.13.210200. The underlying flaw is improper limitation of a pathname to a restricted directory, allowing contents of a USB drive partition ...

PT-2026-21778

Name of the Vulnerable Software and Affected Versions Linksys MR9600 version 1.0.4.205530 Linksys MX4200 version 1.0.13.210200 Description A path traversal issue exists in Linksys MR9600 and MX4200 devices. This allows the contents of a USB drive partition to be mounted in an arbitrary location...

Unspecified Vulnerability in Mimosa Client Radios and Mimosa Backhaul Radios (CNVD-2017-08182)

Mimosa Client Radios and Mimosa Backhaul Radios are both products of Mimosa Networks, Inc.Mimosa Client Radios is a hypervisor for the client devices of the Mimosa multipoint solution.Mimosa Backhaul Radios is Mimosa Backhaul Radios is a management program for broadband backhaul devices. A securi...

SUIDPerl 5.00503 - Mail Shell Escape (2)

source: https://www.securityfocus.com/bid/1547/info The interaction between some security checks performed by suidperl, the setuid version of perl, and the /bin/mail program creates a scenario that allows local malicious users to execute commands with root privileges. The suidperl program perform...