1564 matches found
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
A Python script to exploit CVE-2022-36446 Software Package Updates RCE Authenticated on Webmin 1.997. Features Supports HTTP and HTTPS even with self-signed certificates with --insecure. Single command execution with --command option. Interactive console with --interactive option...
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 リモートコード実行 脆弱性をトリガーするには、「Software Package Updates」モジュールへのアクセスが必要です。このモジュールにアクセスできるユーザーは、新しいパッケージのインストール時にOSコマンドインジェクションを実行することで、システム上でroot権限のコマンドを実行できます。 HTTPリクエスト: root@kitploit: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000...
CVE-2022-36446-Webmin-RCE
CVE-2022-36446 — Webmin 1.997 RCE Authenticated Exploit para la vulnerabilidad de Remote Code Execution en Webmin versiones anteriores a 1.997, a través del módulo Software Package Updates. ¿Cómo funciona? El módulo Software Package Updates de Webmin no sanitiza correctamente el parámetro u antes...
CVE-2026-78985 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-78963 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-55857 vulnerabilities
Vulnerabilities for packages: debezium, flyway, keycloak, zipkin...
Malicious code in giga-clean-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips, authentik-fips, authentik...
MAL-2026-12864 Malicious code in bnpl-blocks-atom-bnpl-badge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57d88037b98733cb7376fa7fa11e80d1d6eb6f9373a7d6e1b555e96039b3abe On require of the package, index.js unconditionally loads polyfill.js, which downloads a platform-specific binary from one of three obfuscated...
MAL-2026-11132 Malicious code in bianira-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...
MAL-2026-10837 Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d967f359f34a28a80622abb6fea5e47bab0c729e194cec31c48c870568c9f1e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2026-62019
These are all security issues fixed in the libsoup-3 0-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57481
This update for libredwg fixes the following issues: Changes in libredwg: - Update to snapshot 0.14.8413 fix dwg next entity NULL pointer dereference CVE-2026-15184, boo1271170 Fix dwg bmp thumbnail overflow checks CVE-2026-15181, boo1271169 Resolve NULL pointer dereference SEGV in match BLOCK...
Malicious code in ashcare-ui-ember (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zzpdfvar03 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwkopt6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvhe14c (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zpx52524pb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...