PT-2026-24723

Name of the Vulnerable Software and Affected Versions Lantronix EDS5000 version 2.1.0.0R3 Description The HTTP RPC module in Lantronix EDS5000 series devices contains a code injection flaw. When user authentication fails, the module executes a shell command to write logs, directly concatenating t...

EUVD-2024-34408

Malicious code in bioql PyPI...

AWS VDP: Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration

The Forecast service in Amazon Web Services AWS has four non-production API endpoints that can be accessed using standard IAM credentials, but do not log any activity to CloudTrail. This allows for silent permission enumeration, where an adversary can test the capabilities of compromised...

Denial Of Service (DoS)

python-multipart is vulnerable to a Denial of Service DoS. The vulnerability is due to excessive logging and inefficient handling of data when parsing form data. Specifically, line breaks before the first boundary and trailing bytes after the last boundary are processed one byte at a time, emitti...

Command Injection

Overview PyNinja is a Lightweight OS-agnostic service monitoring API Affected versions of this package are vulnerable to Command Injection through relative path for service managers and due to insufficient logging for service level failures. Remediation Upgrade PyNinja to version 0.0.4 or higher...

SUSE-SU-2020:0026-2 Security update for sysstat

This update for sysstat fixes the following issues: Security issue fixed: - CVE-2019-19725: Fixed double free in checkfileactlst in sacommon.c bsc1159104. Bug fixes: - Enable log information of starting/stoping services. bsc1144923, jscSLE-5958...