1573 matches found
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE Authenticated Эксплойт для уязвимости Remote Code Execution в Webmin версиях старше 1.997, через модуль Software Package Updates. Как это работает? Модуль Software Package Updates Webmin не санитизирует должным образом параметр u перед передачей его системе...
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Exécution de code à distance L'accès au module « Mises à jour des paquets logiciels » est nécessaire pour déclencher la vulnérabilité. Les utilisateurs ayant accès à ce module peuvent exécuter des commandes avec les privilèges root sur le système en...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
Un script Python pour exploiter CVE-2022-36446 - Mises à jour de paquets logiciels RCE Authentifié sur Webmin 1.997. Fonctionnalités Prend en charge HTTP et HTTPS même avec des certificats auto-signés avec --insecure. Exécution d'une seule commande avec l'option --command. Console interactive ave...
CVE-2026-78985 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-78963 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-55857 vulnerabilities
Vulnerabilities for packages: flyway, keycloak, zipkin, debezium...
Malicious code in giga-clean-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, authentik, openstack-horizon-2026.1...
MAL-2026-12864 Malicious code in bnpl-blocks-atom-bnpl-badge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...
Photon OS 5.0: Gtk3 PHSA-2025-5.0-91-0442
An update of the gtk3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0442. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MAL-2026-11132 Malicious code in bianira-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...
MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-62019
These are all security issues fixed in the libsoup-3 0-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57481
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 fix dwg next entity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwg bmp thumbnail overflow checks CVE-2026-15181, boo1271169 Resolve NULL pointer dereference SEGV in match BLOCK...
Malicious code in ashcare-ui-ember (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zzpdfvar03 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwkopt6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvhe14c (RubyGems)
--- -= Per source details. Do not edit below this line.=-...