Smittix

**Name of the Vulnerable Software and Affected Versions** xrdp versions prior to 0.10.6 **Description** An authenticated remote user can execute arbitrary commands on the server due to unsafe handling of the `AlternateShell` parameter in xrdp-sesman. When the `AllowAlternateShell` setting is enabled, the server accepts a client-supplied `AlternateShell` value and executes it via /bin/sh -c during session initialization. This leads to shell-interpreted execution of unsanitized, user-controlled input, providing a remote command execution primitive within the security context of the authenticated user before the window manager starts. This process can bypass session initialization flows that normally restrict execution to interactive desktop environments. **Recommendations** Update to version 0.10.6. As a temporary workaround, disable the `AllowAlternateShell` setting to prevent the execution of client-supplied shell values.

**Name of the Vulnerable Software and Affected Versions** Pi-hole version 6.4 **Description** A local privilege-escalation issue allows code execution as root from the low-privilege `pihole` account. While the `pihole` account uses nologin, which prevents direct interactive login, code can still run under the `pihole` UID if a component is compromised. In such a scenario, an attacker can place controlled content in the `/etc/pihole/versions` file, which is then sourced by scripts running with root privileges, resulting in root code execution. **Recommendations** Update Pi-hole to version 6.4.1.