5078 matches found
MAL-2025-46752 Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...
Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...
Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell
Summary EVE is a smart home and building automation solution designed for both residential and commercial environments, including malls, hotels, restaurants, bars, gyms, spas, boardrooms, and offices. It enables comprehensive control and monitoring of electrical installations through a highly...
Project-Frame-Jacking-The-Gallery-Heist
Executive Summary A comprehensive penetration test was conduc...
Linux Distros Unpatched Vulnerability : CVE-2025-46718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges e.g. execution of a single...
Linux Distros Unpatched Vulnerability : CVE-2025-46717
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no or very limited sudo privileges can determine...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463chwoot English documenthttps://github.com/Yu...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.3)
The version of AHV installed on the remote host is prior to 10.0.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.3 advisory. - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications th...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103068)
The version of AHV installed on the remote host is prior to 20230302.103068. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103068 advisory. - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17,...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.0.5)
The version of AOS installed on the remote host is prior to 7.3.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.0.5 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...
Linux Distros Unpatched Vulnerability : CVE-2018-0493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash,...
Security Bulletin: Vulnerability in Sudo package affects IBM Integrated Analytics System.
Summary The Sudo package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addresed the applicable CVE CVE-2021-3156, CVE-2019-19234, CVE-2019-19232. Vulnerability Details CVEID:CVE-2021-3156 DESCRIPTION: Sudo before 1.9.5p2 contains an off-by-one error that can resu...
Linux Distros Unpatched Vulnerability : CVE-2023-26604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the systemctl statu...
CVE-2025-32980
NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...
MAL-2025-34158 Malicious code in sudo-resolve-deserialize-file-cloud (npm)
The package sudo-resolve-deserialize-file-cloud was found to contain malicious code...
Malicious code in star-cold-sudo-encrypt-void (npm)
The package star-cold-sudo-encrypt-void was found to contain malicious code...
Malicious code in sudo-hash-hash-public-void (npm)
The package sudo-hash-hash-public-void was found to contain malicious code...
MAL-2025-28369 Malicious code in optimize-sudo-spy-omega-error (npm)
The package optimize-sudo-spy-omega-error was found to contain malicious code...