299656 matches found
CVE-2026-84278
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root sshconfigwrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges...
pkwner
██████╗ ██╗ ██╗██╗ ██╗███╗ ██╗███████╗██████╗ ██╔══██╗██║ ██╔╝██║ ██║████╗ ██║██╔════╝██╔══██╗ ██████╔╝█████╔╝ ██║ █╗ ██║██╔██╗ ██║█████╗ ██████╔╝ ██╔═══╝ ██╔═██╗ ██║███╗██║██║╚██╗██║██╔══╝ ██╔══██╗ ██║ ██║ ██╗╚███╔███╔╝██║ ╚████║███████╗██║ ██║ ╚═╝ ╚═╝ ╚═╝ ╚══╝╚══╝ ╚═╝ ╚═══╝╚══════╝╚═╝ ╚═╝ Un Po...
CVE-2026-107361
The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...
CVE-2026-107336
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...
CVE-2026-107361 Authentication Bypass Using an Alternate Path or Channel in Malcolm
The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...
CVE-2026-107361 Authentication Bypass Using an Alternate Path or Channel in Malcolm
The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...
CVE-2026-107361
The Malcolm security tool is vulnerable to an authentication bypass in the Arkime live capture service (arkime-live) . Because the service runs in network_mode: host and listens on port 8005 across all interfaces, a network-adjacent attacker can bypass the nginx proxy by connecting directly. The ...
EUVD-2026-95119
The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...
CVE-2026-107336 Authentication Bypass by Spoofing in Malcolm
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...
CVE-2026-107336
The Malcolm front nginx reverse proxy contains an authentication bypass vulnerability. A
CVE-2026-107336 Authentication Bypass by Spoofing in Malcolm
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...
EUVD-2026-95115
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...
CVE-2026-107336
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...
CVE-2026-107336 Authentication Bypass by Spoofing in Malcolm
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...
AZL-107664 CVE-2026-61801 affecting package kubevirt 1.8.4-2
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
AZL-107072 CVE-2026-61801 affecting package cri-o 1.30.1-1
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
AZL-107042 CVE-2026-61801 affecting package buildah 1.43.1-3
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
AZL-107099 CVE-2026-61801 affecting package kata-containers-preview 3.27.0~preview2-2
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
AZL-107111 CVE-2026-61801 affecting package podman 5.6.1-10
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
AZL-107243 CVE-2026-61801 affecting package containerd2 2.3.4-1
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...