CVE-2026-67439 OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go StartActionAndWait and StartActionByGetAndWait endpoints return full LogEntry output after execution without enforcing the logs permission, allowing a user...

EUVD-2006-6105

Malware in sbrugna...

SUSE CVE-2017-17520

tools/urlhandler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has reported that this is intentional behavior,...

TIN Parameter Injection Vulnerability

TIN is a Usenet Internet Exchange System full-screen news reader. A security vulnerability exists in the tools/urlhandler.pl file in TIN version 2.4.1, which stems from the program failing to validate strings before starting the program. A remote attacker can exploit the vulnerability to perform ...

CVE-2006-6122

Multiple buffer overflows in TIN before 1.8.2 have unspecified impact and attack vectors, a different vulnerability than CVE-2006-0804...

DEBIAN-CVE-2006-0804

Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow...