16 matches found
EUVD-2025-13914
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-47203
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used. CVE-2025-47203 Note that Nessus...
[SECURITY] [DLA 4169-1] dropbear security update
Debian LTS Advisory DLA-4169-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 17, 2025 https://wiki.debian.org/LTS Package : dropbear Version : 2020.81-3+deb11u3 CVE ID : CVE-2025-47203 Marcin Nowak discovered that dbclient1 hostname arguments with a comma for...
MGASA-2025-0158 Updated dropbear packages fix security vulnerability
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
Updated dropbear packages fix security vulnerability
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
ALPINE-CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
UBUNTU-CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
CVE-2025-47203
CVE-2025-47203 affects the Dropbear SSH package’s dbclient before version 2025.88. The vulnerability arises because a shell is used when processing the hostname argument, allowing an attacker to craft an untrusted hostname that can trigger command execution. Impact is described as arbitrary comma...
PT-2025-20286
Name of the Vulnerable Software and Affected Versions: Dropbear SSH versions prior to 2025.88 Description: The issue allows command injection via an untrusted hostname argument, because a shell is used. This occurs when the dbclient in Dropbear SSH is used with an untrusted hostname...
CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
dropbear 安全漏洞
dropbear is an application by Matt Johnston Personal Developer. A security vulnerability exists in dropbear versions prior to 2025.88 that stems from an untrusted hostname parameter in the dbclient leading to command injection...
CVE-2025-47203
dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...
Buffer overflow
Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a crafted command line. NOTE: It is unclear whether there are any common situations in which redis-cli is used with, for example, a -h aka...