42957 matches found
Kevin Poorman Salesforce CLI MCP Server command injection vulnerability
Kevin Poorman: The Salesforce CLI MCP Server versions 1.3.2 and earlier contain a command injection vulnerability. This vulnerability arises because escapeValue fails to neutralize backticks, $, and other shell metacharacters, allowing attackers to supply specially crafted flags for the Salesforc...
PT-2026-126387
In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...
emacs security update
1:29.4-17 - Fix arbitrary code execution upon opening file CVE-2026-96269 1:29.4-16 - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 1:29.4-15 - tramp: restrict user name to prevent shell injection CVE-2026-79992...
PT-2026-126428
Name of the Vulnerable Software and Affected Versions Kali-GPT versions prior to commit a608c74 Description An OS command injection exists in the execute tool function within kali gpt/tools/mcp server.py. This issue allows MCP clients or prompt-injected agents to execute arbitrary commands as the...
CVE-2026-111422 Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...
CVE-2017-7494
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...
CVE-2026-0073
CVE-2026-0073: Android Wireless Debugging adbd Authentication Bypass Disclaimer: This Proof of Concept PoC is provided strictly for educational and authorized security research purposes. Unauthorized access to computer systems is illegal. Always ensure you have explicit permission before testing...
CVE-2026-26128 SMB Relay Privesc (from shell)
Post-exploitation wrapper for CVE-2026-26128: reads domain identity from an active Windows shell session, then launches the ADIDNS Unicode hostname + Kerberos coercion + SMB relay chain. Operator must still supply password, listener IP, and relay target AD CS or MSSQL. !/usr/bin/env python3 --...
Samba CVE-2007-2447 usermap script RCE
CVE-2007-2447 Samba 3.0.20: SMB Session Setup username is passed unsanitized to username map script when configured — shell injection. !/usr/bin/env python3 -- coding: utf-8 -- """Samba CVE-2007-2447 username map script command injection.""" from future import annotations import socket import tim...
OP5 Monitor CVE-2025-34115 command_test RCE
CVE-2025-34115 bypass: authenticated cmdstr on /monitor/op5/nacoma/commandtest.php runs $... via naemon shell mode. !/usr/bin/env python3 -- coding: utf-8 -- """ITRS OP5 Monitor CVE-2025-34115 patch-bypass commandtest RCE.""" from future import annotations import base64 import re from kittysploit...
OpenSTAManager CVE-2025-69212 P7M import RCE
CVE-2025-69212 OpenSTAManager = 2.9.8: authenticated importFEZIP upload passes unsanitized .p7m entry names into openssl exec, enabling shell command injection ZIP names must avoid '/' characters. !/usr/bin/env python3 -- coding: utf-8 -- """OpenSTAManager CVE-2025-69212 P7M filename command...
libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow
A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially...
CVE-2026-115930
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
nmg
NMG - .NET Memory-shell Generator Parameterized .NET memory shell generator | Red team / security testing | JMG equivalent for .NET Architecture +-----------------------------------------------------+ | nmg.exe CLI | +------------------------+----------------------------+ | generate payload | pro...
CVE-2026-115930 MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
CVE-2026-115930
The MongoDB Shell (mongosh) is vulnerable in versions prior to 2.14.0 because its underlying Node.js runtime includes recoverable eMudhra intermediate CA certificates in its TLS root certificate store. This configuration could allow for improper certificate validation. Impacted users should updat...
EUVD-2026-109932
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
CVE-2026-115930 MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs
The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...
