Suggestions search

All statuses

Filter by:

With package: python312Packages.aiobafi6

Found 3 matching suggestions

View:

Compact

Detailed

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-6024

7.3 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Exploit Code Maturity (E): Proof-of-Concept (P)
Remediation Level (RL): Not Defined (X)
Report Confidence (RC): Reasonable (R)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 2 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 1 month, 2 weeks ago

Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal

A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP Handler. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

References

VDB-356600 | Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal vdb-entrytechnical-description
VDB-356600 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
Submit #791826 | Tenda i6 V1.0.0.7(2204) Path Traversal third-party-advisory
https://github.com/Litengzheng/vuldb_new/blob/main/M3/vul_84/README.md exploit
https://www.tenda.com.cn/ product

Affected products

==1.0.0.7(2204)

Matching in nixpkgs

pkgs.tests.fetchpatch2.hunks

None

nixos-unstable i6w1nd25mdns
- nixpkgs-unstable i6w1nd25mdns
- nixos-unstable-small i6w1nd25mdns

pkgs.tests.fetchpatch2.decode

None

nixos-25.11 i6vx4j3n3dac
- nixos-25.11-small i6vx4j3n3dac
- nixpkgs-25.11-darwin i6vx4j3n3dac

pkgs.tests.fetchpatch2.simple

None

nixos-unstable 2fda4x41i607
- nixpkgs-unstable 2fda4x41i607
- nixos-unstable-small 2fda4x41i607

pkgs.tests.fetchzip.postFetch

None

nixos-unstable kbzs7f8irgi6
- nixpkgs-unstable kbzs7f8irgi6
- nixos-unstable-small kbzs7f8irgi6

pkgs.python312Packages.aiobafi6

Library for communication with the Big Ass Fans i6 firmware

nixos-25.11 aiobafi6-0.10.0
- nixos-25.11-small aiobafi6-0.10.0
- nixpkgs-25.11-darwin aiobafi6-0.10.0

pkgs.python313Packages.aiobafi6

Library for communication with the Big Ass Fans i6 firmware

nixos-unstable aiobafi6-0.10.1
- nixpkgs-unstable aiobafi6-0.10.1
- nixos-unstable-small aiobafi6-0.10.1
nixos-25.11 aiobafi6-0.10.0
- nixos-25.11-small aiobafi6-0.10.0
- nixpkgs-25.11-darwin aiobafi6-0.10.0

pkgs.python314Packages.aiobafi6

Library for communication with the Big Ass Fans i6 firmware

nixos-unstable aiobafi6-0.10.1
- nixpkgs-unstable aiobafi6-0.10.1
- nixos-unstable-small aiobafi6-0.10.1

pkgs.tests.fetchFromGitHub.leave-git

None

nixos-unstable i6x92w77k0dr
- nixpkgs-unstable i6x92w77k0dr
- nixos-unstable-small i6x92w77k0dr

pkgs.tests.fetchPypiLegacy.fetchSimple

None

nixos-25.11 0ldjg4xi6gdn
- nixos-25.11-small 0ldjg4xi6gdn
- nixpkgs-25.11-darwin 0ldjg4xi6gdn

pkgs.tests.prefer-remote-fetch.fetchzip

None

nixos-unstable gd4wxpxcwni6
- nixpkgs-unstable gd4wxpxcwni6
- nixos-unstable-small gd4wxpxcwni6

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-1363

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 4 months ago Activity log

Created suggestion 4 months ago

JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security

IAQS and I6 developed by JNC has a Client-Side Enforcement of Server-Side Security vulnerability, allowing unauthenticated remote attackers to gain administrator privileges by manipulating the web front-end.

References

https://www.twcert.org.tw/tw/cp-132-10652-4cdca-1.html third-party-advisory
https://www.twcert.org.tw/en/cp-139-10653-117a1-2.html third-party-advisory

Affected products

IAQS

Matching in nixpkgs

pkgs.tests.fetchpatch2.full

None

nixos-unstable i6pjkv4ll645
- nixpkgs-unstable i6pjkv4ll645

pkgs.python312Packages.aiobafi6

Library for communication with the Big Ass Fans i6 firmware

nixos-unstable aiobafi6-0.10.0
- nixpkgs-unstable aiobafi6-0.10.0
- nixos-unstable-small aiobafi6-0.10.0

pkgs.python313Packages.aiobafi6

Library for communication with the Big Ass Fans i6 firmware

nixos-unstable aiobafi6-0.10.0
- nixpkgs-unstable aiobafi6-0.10.0
- nixos-unstable-small aiobafi6-0.10.0

pkgs.tests.fetchpatch2.fileWithApostrophe

None

nixos-unstable -
- nixos-unstable-small v1fabi6ssaj1

pkgs.tests.fetchtorrent.magnet-link-transmission

None

nixos-unstable -
- nixos-unstable-small 6bli67wi9dm3

pkgs.tests.fetchtorrent.http-link-rqbit-unflattened

None

nixos-unstable -
- nixos-unstable-small 98fsi6afcza8

Package maintainers

@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Untriaged

Permalink CVE-2026-1364

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 4 months ago Activity log

Created suggestion 4 months ago

JNC｜IAQS and I6 - Missing Authentication

IAQS and I6 developed by JNC has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly operate system administrative functionalities.