https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:28:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05187 bdu:2026-05187 https://cve.radiocsirt.org/vuln/bdu:2026-05187 https://cve.radiocsirt.org/vuln/euvd-2026-318276 EUVD-2026-318276 https://cve.radiocsirt.org/vuln/euvd-2026-318276 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34073 <p>An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions &lt;=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.check_output() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.</p> <p>An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions &lt;=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.check_output() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-34073 https://cve.radiocsirt.org/vuln/ghsa-6655-8f3g-xp52 <p>An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions &lt;=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.check_output() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.</p> <p>An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions &lt;=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input passed to subprocess.check_output() in core/http.py, allowing injection of shell metacharacters. Exploitation does not require authentication and commands are executed with the privileges of the Maltrail process.</p> https://cve.radiocsirt.org/vuln/ghsa-6655-8f3g-xp52