Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection — Detect

Fingerprint / reachability check for Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Puppet Enterprise — CVE-2025-5459 Patch-Bypass Variant → keytool Shell Injection → Root RCE""" from kittysplo...

StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE — Detect

Fingerprint / reachability check for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for StreamSets DataCollector — Default Credentials + Shell Executor → Root RCE""" from kittysploit import from...

core-admin escape_param shell injection (bytecode sink)

Loads product security.pyc/command.pyc to craft shell metacharacters for configured sink templates local bytecode lab; use product UI/API on target. """core-admin — Systemic Shell Command Injection via Ineffective Quote Escaping → Authenticated Root RCE""" from future import annotations from...

Puppet Enterprise keytool shell injection root RCE

RBAC token → classifier PE Master group → javakeystorepasswd injection + trustedinfracacert trigger; orchestrator deploy runs agent. """Puppet Enterprise classifier keytool passwd injection CVE-2025-5459 variant.""" from future import annotations import json import re from kittysploit import from...

CVE-2026-117573 hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

EUVD-2026-110849

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

CVE-2026-117573 hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

CVE-2026-117573

The hagent tool (through commit 761eec6) is vulnerable to an OS command injection vulnerability within the hagent_arduino and hagent_esp32 tools. The flaw exists because the args parameter is improperly sanitized, allowing attackers or prompt-injected agents to supply metacharacters that are inte...

CVE-2026-117573 hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagentarduino and hagentesp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

CVE-2026-117569

The Kali-GPT tool (specifically through commit a608c74 ) is vulnerable to an OS command injection in the execute_tool() function within kali_gpt/tools/mcp_server.py. The flaw allows MCP clients or prompt-injected agents to execute arbitrary commands by embedding shell metacharacters into unsaniti...

CVE-2026-117569 Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in executetool in kaligpt/tools/mcpserver.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target,...

CVE-2026-117569 Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in executetool in kaligpt/tools/mcpserver.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target,...

EUVD-2026-110847

Kali-GPT through commit a608c74 contains an OS command injection vulnerability in executetool in kaligpt/tools/mcpserver.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target,...

CVE-2026-117560

The ATXP Gemini CLI extension (through version 1.0.0 ) contains an OS command injection vulnerability within the runAtxp() function. The root cause is the processing of unsanitized MCP tool parameters , which allows an attacker to execute shell commands as the user. Specifically, attackers can pl...

EUVD-2026-110838

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117559 DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.runshell or...

CVE-2026-117559

DroidMind versions through 0.4.0 are susceptible to a command injection vulnerability due to a shell command allowlist bypass. The flaw allows MCP clients to execute unauthorized commands, such as rebooting connected Android devices, by using $(...) or backtick substitution in parameters interpol...