EUVD-2012-6004

Malware in sbrugna...

EUVD-2013-2143

Malware in sbrugna...

EUVD-2022-3115

Malicious code in bioql PyPI...

EUVD-2022-47485

Malicious code in bioql PyPI...

EUVD-2022-5221

Malicious code in bioql PyPI...

CVE-2022-30971

Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-30972

A cross-site request forgery CSRF vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins parse a local XML file e.g., archived artifacts that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery...

CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

CVE-2020-2277

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

Linux Distros Unpatched Vulnerability : CVE-2013-7284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request,...

SUSE CVE-2013-7284

The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

SUSE CVE-2018-1000051

Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fzkeepkeystorable that can result in DOS / Possible code execution. This attack appear to be exploitable via Victim opens a specially crafted PDF...

lesspipe: Arbitrary Code Exeecution

Background lesspipe is a preprocessor for less. Description lesspipe has support for parsing Perl storable "PST" files, Impact A crafted Perl storable file which is passed into lesspipe could result in arbitrary code execution. Workaround There is no known workaround at this time. Resolution All...

CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

Design/Logic Flaw

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

Gentoo 代码问题漏洞

Gentoo is an open source Linux system from the Gentoo Foundation. A code issue vulnerability exists in Gentoo lesspipe versions prior to 2.06. An attacker can exploit this vulnerability to execute code via a Perl Storable pst file...

PT-2022-27228 · Lesspipe +1 · Lesspipe +1

Name of the Vulnerable Software and Affected Versions: lesspipe versions prior to 2.06 Description: The issue allows attackers to execute code via Perl Storable pst files. This is due to deserialized object destructor execution via a key/value pair in a hash. Recommendations: For versions prior t...

CVE-2022-44542

lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...

CVE-2022-44542

CVE-2022-44542 affects lesspipe up to version 2.05; vulnerability arises from handling Perl Storable (pst) files where a crafted PST can trigger deserialized object destructor execution, enabling remote code execution. Impact is described as total compromise with high confidentiality, integrity, ...