Smittix

**Name of the Vulnerable Software and Affected Versions** xrdp versions prior to 0.10.6 **Description** An authenticated remote user can execute arbitrary commands on the server due to unsafe handling of the `AlternateShell` parameter in xrdp-sesman. When the `AllowAlternateShell` setting is enabled, the server accepts a client-supplied `AlternateShell` value and executes it via /bin/sh -c during session initialization. This leads to shell-interpreted execution of unsanitized, user-controlled input, providing a remote command execution primitive within the security context of the authenticated user before the window manager starts. This process can bypass session initialization flows that normally restrict execution to interactive desktop environments. **Recommendations** Update to version 0.10.6. As a temporary workaround, disable the `AllowAlternateShell` setting to prevent the execution of client-supplied shell values.

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability allows code execution as root from the low-privilege pihole account. Important context: the pihole account uses nologin, so this is not a direct interactive-login issue. However, nologin does not prevent code from running as UID pihole if a Pi-hole component is compromised. In that realistic post-compromise scenario, attacker-controlled content in /etc/pihole/versions is sourced by root-run Pi-hole scripts, leading to root code execution. This vulnerability is fixed in 6.4.1.