CVE-2026-117559 DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.runshell or...

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

EUVD-2026-110762

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands "edgelet provision" and "edgelet config cert" on supported releases; "iofog-agent provision" and...

hunt-for-cve-2018-10933

Hunt for and Exploit the libSSH Authentication Bypass CVE-2018-10933 Practical Guide explaining how to find hosts vulnerable to the libSSH Authentication Bypass CVE-2018-10933 and how to exploit them to gain shell access. Please refer to the following blog post for instructions:...

Malicious code in h13t0ry-hello-demo (PyPI)

Source: kam193 e27409f6c0ba5c7e7ba22f21c8b4806686ae8b64f4d7daf2dd9a7e6182bef5ab During import package starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-h13t0ry-hello-demo Reasons based on the campaign: - The package...

MAL-2026-18336 Malicious code in h13t0ry-hello-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a52ed4e00f54dc99a4b460ad2d881b62a7a85c636085f4166f4062cebea374 On import, the package's top-level module code opens a TCP socket to the hardcoded IP 115.190.210.22:80, duplicates the socket over stdin/stdout/stde...

Malicious code in h13t0ry-hello-demo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a52ed4e00f54dc99a4b460ad2d881b62a7a85c636085f4166f4062cebea374 On import, the package's top-level module code opens a TCP socket to the hardcoded IP 115.190.210.22:80, duplicates the socket over stdin/stdout/stde...

PT-2026-126427

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $, backticks or a closing double quote in an...

PT-2026-126426

Name of the Vulnerable Software and Affected Versions esp-mcp versions prior to commit 28afddf Description An OS command injection flaw exists where attackers can execute arbitrary commands by providing shell metacharacters within MCP tool parameters. This occurs when values for target, port,...

Atlantis command injection vulnerability

Versions 0.4.0 through 0.47.1 of Atlantis contain a command injection vulnerability. This vulnerability arises when values controlled by fetch requests in atlantis.yaml are concatenated into Terraform command parameters and executed via sh -c. Authenticated contributors can inject shell...

PT-2026-126420

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue in src/utils.ts fails to neutralize backticks, $ substitution, and other shell metacharacters,...

ATXP command injection vulnerability

Versions 1.0.0 and earlier of ATXP contain a command injection vulnerability. This flaw arises because the runAtxp function fails to sanitize parameters passed to the MCP tool. Attackers can exploit this by replacing $ or backticks within email or SMS content, thereby injecting values into...

PT-2026-126419

Name of the Vulnerable Software and Affected Versions ATXP Gemini CLI extension versions prior to 1.0.1 Description An OS command injection issue exists in the runAtxp function. The software fails to sanitize MCP tool parameters, allowing attackers to execute shell commands as the user. This can ...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1793119617)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793119617 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that...

PT-2026-126430

hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent arduino and hagent esp32 tools. Attackers or prompt-injected agents can supply crafted args interpolated...

PT-2026-126418

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $... or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.run shell or...

Joern 4.0.666

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Kevin Poorman Salesforce CLI MCP Server command injection vulnerability

Kevin Poorman: The Salesforce CLI MCP Server versions 1.3.2 and earlier contain a command injection vulnerability. This vulnerability arises because escapeValue fails to neutralize backticks, $, and other shell metacharacters, allowing attackers to supply specially crafted flags for the Salesforc...

PT-2026-126387

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...