Lucene search
+L

32288 matches found

OSV
OSV
added 2026/07/09 4:31 a.m.5 views

CVE-2026-41857 BOSH CLI Shell Injection

A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh or bosh scp/bosh logs -f with default flags. Affected versions: BOSH CLI versions prior to 7.10.5...

7.1CVSS7.1AI score
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/09 2:52 a.m.6 views

SUSE CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

5.9CVSS6.1AI score0.00159EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/09 12:0 a.m.13 views

PT-2026-57042

Summary A crafted backup archive can trigger OS command injection during database restore. The restore workflow extracts a ZIP archive, enumerates files under db-dumps, converts the dump path to an absolute path, and passes that path into database import commands that are built as shell command...

8CVSS6.2AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/09 12:0 a.m.22 views

Malicious code in @wagni_bot/bsc-sdk (npm)

The npm package @wagnibot/bsc-sdk is a supply-chain credential stealer disguised as a BNB Smart Chain BSC SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycl...

5.8AI score
SaveExploits0References9
OSV
OSV
added 2026/07/09 12:0 a.m.4 views

ALSA-2026:37410 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

9.1CVSS6.2AI score0.006EPSS
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/09 12:0 a.m.38 views

Malicious code in antsrcsrctest (npm)

The npm package antsrcsrctest masquerades as a "simple date formatting utility" index.js exports a harmless formatDate function that is never referenced by the malicious code but is a credential-harvesting and cloud-metadata-stealing reconnaissance tool. It declares a preinstall: node preinstall....

6.1AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:0 a.m.9 views

RockyLinux 8 : libxml2 (RLSA-2026:36734)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36734 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from th...

2.5CVSS6.4AI score0.00207EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/08 9:16 p.m.11 views

CVE-2026-54590

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig.settokens that blocks /, , and .. before %u substitution in...

5.9CVSS0.00286EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/08 9:12 p.m.9 views

GHSA-37H2-6P4F-MP3Q Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

Summary Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port TCP 24282, hardcoded as 0x5EDA in constants.py. The server has no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach...

8.3CVSS6.5AI score0.00291EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/07/08 9:12 p.m.14 views

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

Summary Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port TCP 24282, hardcoded as 0x5EDA in constants.py. The server has no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach...

8.3CVSS6.7AI score0.00291EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/08 9:10 p.m.32 views

CVE-2026-55849

The CVE affects @cyclonedx/cyclonedx-npm: from 2.1.0 up to 5.0.0, the CLI passes user-supplied --workspace values to a subshell when npm_execpath is unset or empty, enabling arbitrary OS command execution with the invoking user’s privileges. Root cause is unsanitized input used in a shell command...

8.5CVSS6.2AI score0.00161EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/08 9:10 p.m.37 views

CVE-2026-55849 @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. From 2.1.0 before 5.0.0, the CLI passes user-supplied --workspace values to a subshell without proper sanitization when npmexecpath is unset or empty, allowing arbitrary OS command execution with the privileg...

8.5CVSS0.00161EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/08 9:10 p.m.4 views

CVE-2026-55849 @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. From 2.1.0 before 5.0.0, the CLI passes user-supplied --workspace values to a subshell without proper sanitization when npmexecpath is unset or empty, allowing arbitrary OS command execution with the privileg...

8.5CVSS6.3AI score
SaveExploits0References6
EUVD
EUVD
added 2026/07/08 8:51 p.m.10 views

EUVD-2026-42417

SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6AI score0.00122EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2026/07/08 8:51 p.m.7 views

CVE-2026-15171

SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

5.5CVSS6.1AI score0.00122EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/07/08 8:33 p.m.10 views

EUVD-2026-42399

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../...

8.1CVSS6.1AI score0.00313EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/08 8:33 p.m.11 views

CVE-2026-54591

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../...

8.1CVSS6.2AI score0.00313EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/07/08 8:24 p.m.16 views

Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

Summary Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow into this string without adequate sanitization: - event.headers keys — interpolated verbatim insi...

6.4AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/07/08 8:24 p.m.5 views

GHSA-V5PX-423J-PF7P Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

Summary Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow into this string without adequate sanitization: - event.headers keys — interpolated verbatim insi...

10CVSS6.4AI score
SaveExploits0References4
OSV
OSV
added 2026/07/08 6:8 p.m.6 views

MAL-2026-7016 Malicious code in @vraksha/gh-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c867b4c68acc159dea1bbd580c5de3f3c9fef7bd1f54cd48a02c59631ffda12 On npm install, the package's postinstall hook runs index.js, which performs an HTTPS GET to https://http-logger-production.up.railway.app/payload,...

6.1AI score
SaveExploits0References1
Rows per page
Query Builder