42816 matches found
Astra Linux – Vulnerability in xrdp
xrdp is an open-source RDP server. Versions up to 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to an unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled which is the default when not explicitl...
Astra Linux – Vulnerability in Erlang
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server might allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in the SSH protocol’s message handling, a malicious...
Astra Linux – vulnerability in libnbd
A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier URI. This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell SSH process,...
Astra Linux – Vulnerability in Ruby-Rack
A sequence injection vulnerability exists in Rack versions 2.0.9.1, 2.1.4.1, and 2.2.3.1. This vulnerability could allow for shell escapes in the Lint and CommonLogger components of Rack...
Astra Linux – Vulnerability in curl
libcurl will reuse a previously established connection even when options related to TLS or SSH have been changed, which should prevent such reuses. libcurl stores previously used connections in a connection pool, allowing for reuse if one of them matches the current setup. However, several TLS an...
Astra Linux – vulnerability in openssh
In OpenSSH versions prior to 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires that the username on the command line is untrusted, as well as non-default configurations of % in sshconfig...
Astra Linux – vulnerability in Zabbix
The Zabbix Agent 2 item key smart.disk.get fails to sanitize its parameters before passing them to a shell command, potentially leading to a remote code execution vulnerability...
SUSE CVE-2026-110925
CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...
ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...
Malicious Package
Overview @beloved-lenora/opencode-shell-guard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...
ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...
PraisonAI: Shell command allowlist bypass via find -exec built-in action
SummaryThe shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj utility-tools shell chaining and GHSA-vjv9-7m7j-h833 SandboxExecutor chaining can be bypassed via find's built-in -exec action.The fix blocks shell metacharacters ;|&$$ and us...
CLSA-2026-1792053113 lrzsz: Fix of 3 CVEs
CVE-2026-105840: lrz: reject absolute and escaping paths in restricted mode - CVE-2026-105841: lrz: remove piping received files to a shell command - CVE-2026-105842: lrz: terminate received data and bound file name length...
CVE-2026-110925
Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...
UBUNTU-CVE-2026-110925
Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...
CVE-2026-110925
...
CVE-2026-110925
A flaw was found in OpenSSH where a username provided via the ssh command line can contain a $ character or a non-trailing backslash. If a configuration expands %u within ProxyCommand or Match exec , these characters are passed directly into the shell, potentially leading to unintended command ex...
