CVEs discovered and reported by me.

CVE-2026-46388 Medium

Arbitrary file read in osquery

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. An unprivileged attacker can read the contents of an osquery file carve until the carve completes and the temporary files are deleted. If the carve targets a directory that the attacker controls, arbitrary file reads are possible (such as /etc/shadow).

CVE-2025-54409 Medium

NULL pointer dereference in AIDE

AIDE is an advanced intrusion detection environment. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service.

CVE-2025-54389 Medium

Improper output neutralization in AIDE

AIDE is an advanced intrusion detection environment. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamper with the log output. A local user might exploit this to bypass the AIDE detection of malicious files.

CVE-2021-42094 Critical

Command Injection in Zammad

Zammad comes with the functionality to upload custom Packages to extend it with features and more. However, there is the possibility to create files out of the application scope that an attacker can use to perform a Command Injection.

CVE-2021-42091 Critical

Server Side Request Forgery in Zammad

Zammad comes with a GitHub and GitLab integration to see the status of linked issues of those applications. However, when configuring the integrations it’s possible to perform a Server Side Request forgery via an malicious URL.

CVE-2021-42086 High

Admin Privilege Escalation in Zammad

Agent users are not allowed to modify other agent or admin users. However, under special circumstances, they might be able to send specially crafted requests leading to modification of agent users that can subsequently be used to log in with admin privileges.