https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 06:03:19 +0000 https://cve.radiocsirt.org/vuln/brew-apkleaks-cve-2021-21386 <p><strong>Affected:</strong> Homebrew: apkleaks</p> <p>APKLeaks is an open-source project for scanning APK file for URIs, endpoints &amp; secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside application manifest. An attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified or could cause other unintended behavior through malicious package name. The problem is fixed in version v2.0.6-dev and above.</p> <p><strong>Affected:</strong> Homebrew: apkleaks</p> <p>APKLeaks is an open-source project for scanning APK file for URIs, endpoints &amp; secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside application manifest. An attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified or could cause other unintended behavior through malicious package name. The problem is fixed in version v2.0.6-dev and above.</p> https://cve.radiocsirt.org/vuln/brew-apkleaks-cve-2021-21386 https://cve.radiocsirt.org/vuln/euvd-2026-22205 EUVD-2026-22205 https://cve.radiocsirt.org/vuln/euvd-2026-22205 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21386 <p>APKLeaks is an open-source project for scanning APK file for URIs, endpoints &amp; secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside application manifest. An attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified or could cause other unintended behavior through malicious package name. The problem is fixed in version v2.0.6-dev and above.</p> <p>APKLeaks is an open-source project for scanning APK file for URIs, endpoints &amp; secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside application manifest. An attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified or could cause other unintended behavior through malicious package name. The problem is fixed in version v2.0.6-dev and above.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21386 https://cve.radiocsirt.org/vuln/ghsa-8434-v7xw-8m9x <p><strong>Affected:</strong> PyPI: APKLeaks</p> <p>APKLeaks prior to v2.0.4 allows remote authenticated attackers to execute arbitrary OS commands via package name inside the application manifest.</p> <p>### Impact</p> <p>An authenticated attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified, or could cause other unintended behavior through malicious package names.</p> <p>### References</p> <p>- a966e781499ff6fd4eea66876d7532301b13a382</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Email me at [me@dw1.io](mailto:me@dw1.io)</p> <p><strong>Affected:</strong> PyPI: APKLeaks</p> <p>APKLeaks prior to v2.0.4 allows remote authenticated attackers to execute arbitrary OS commands via package name inside the application manifest.</p> <p>### Impact</p> <p>An authenticated attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified, or could cause other unintended behavior through malicious package names.</p> <p>### References</p> <p>- a966e781499ff6fd4eea66876d7532301b13a382</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Email me at [me@dw1.io](mailto:me@dw1.io)</p> https://cve.radiocsirt.org/vuln/ghsa-8434-v7xw-8m9x https://cve.radiocsirt.org/vuln/gsd-2021-21386 gsd-2021-21386 https://cve.radiocsirt.org/vuln/gsd-2021-21386 https://cve.radiocsirt.org/vuln/pysec-2026-281 <p><strong>Affected:</strong> PyPI: apkleaks</p> <p>APKLeaks prior to v2.0.4 allows remote authenticated attackers to execute arbitrary OS commands via package name inside the application manifest.</p> <p>### Impact An authenticated attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified, or could cause other unintended behavior through malicious package names.</p> <p>### References - a966e781499ff6fd4eea66876d7532301b13a382</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Email me at [me@dw1.io](mailto:me@dw1.io)</p> <p><strong>Affected:</strong> PyPI: apkleaks</p> <p>APKLeaks prior to v2.0.4 allows remote authenticated attackers to execute arbitrary OS commands via package name inside the application manifest.</p> <p>### Impact An authenticated attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified, or could cause other unintended behavior through malicious package names.</p> <p>### References - a966e781499ff6fd4eea66876d7532301b13a382</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Email me at [me@dw1.io](mailto:me@dw1.io)</p> https://cve.radiocsirt.org/vuln/pysec-2026-281