PT-2026-106738

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type text and launch app tools in ufo/client/mcp/http servers/mobile mcp server.py pass the authenticated caller-controlled text and package name parameters into adb shell comma...

tesla-security-research

Investigación de Seguridad en Tesla Investigación de vulnerabilidades en el sistema de infoentretenimiento del Tesla Model 3/Y Intel Atom MCU, Linux 4.14.235, divulgadas de manera responsable a Tesla a través de Bugcrowd. Se obtuvo acceso root persistente en un Tesla Model 3 de producción mediant...

simple-git allows command execution through unblocked Git configuration includes

Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...

GHSA-G4WM-2VF7-VFGR simple-git allows command execution through unblocked Git configuration includes

Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...

CVE-2022-36804

CVE-2022-36804 Los componentes de Bitbucket Server y Bitbucket Data Center tienen una vulnerabilidad de inyección de comandos, según información descubierta recientemente por el equipo de seguridad de Sangfor. Un atacante puede enviar solicitudes HTTP maliciosas para ejecutar código arbitrario y...

@nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

GHSA-6VC5-VF29-FFR2 @nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

NPM: Nx: OS command injection via git revisions and remote refs

NPM: Nx: OS command injection via git revisions and remote refs vulnerability discovered by ? in WordPress Npm nx versions = 14.0.0, 22.7.8...

Nx: OS command injection via git revisions and remote refs

Summary Nx core builds several git invocations as shell command strings with untrusted values interpolated into them, so a value that should be a git revision or ref is parsed by /bin/sh instead. Two entry points are reachable by an attacker: affected commands, where defaultBase /...

GHSA-W2VW-W76X-QR89 Nx: OS command injection via git revisions and remote refs

Summary Nx core builds several git invocations as shell command strings with untrusted values interpolated into them, so a value that should be a git revision or ref is parsed by /bin/sh instead. Two entry points are reachable by an attacker: affected commands, where defaultBase /...

Centreon-20.04

CVE-2020-12688 - RCE Autenticado Centreon 20.04 Variable de nombre de comando en minHelpCommand.php RCE CVE-2020-12688 Documentación de la última versión de Centreon: https://docs.centreon.com/current/en/releases/centreon-core.html Descubierto por: TheCyberGeek Fecha de descubrimiento: 30/04/2020...

CVE-2025-69212_PoC

CVE-2025-69212: Prueba de Concepto PoC de OpenSTAManager Este repositorio contiene una Prueba de Concepto PoC que demuestra la vulnerabilidad identificada como CVE-2025-69212 en OpenSTAManager, una vulnerabilidad de Inyección de Comandos del Sistema Operativo causada por la funcionalidad de...

VulnerableSpringDataRest

Aplicación Spring DataRest Vulnerable Esta es una aplicación Spring Data REST diseñada intencionalmente para probar y demostrar la vulnerabilidad CVE-2017-8046 y los desafíos de probar la inyección de comandos y la ejecución remota de código a través de APIs REST Tiene soporte para Swagger UI par...

CVE-2026-9277

CVE-2026-9277 - Exploit de Inyección de Comandos en Shell-Quote Un script de exploit Proof of Concept PoC especializado diseñado para verificar y demostrar CVE-2026-9277 , una vulnerabilidad estructural de inyección de comandos encontrada en versiones heredadas de la librería shell-quote = 1.8.3...

codeql-workshop

Finding vulnerabilities with CodeQL Original workshop by Sylwia Budzynska Prerequisites • Resources • Workshop Who is this for : Security Engineers, Security Researchers, Developers. What you'll learn : Learn how to use CodeQL for code exploration and for finding security issues. What you'll buil...

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Informe de Hallazgos Enigma 📋 Resumen Este repositorio contiene un informe completo de prueba de penetración para la máquina Enigma de Hack The Box. 🔍 Hallazgos Clave Recurso compartido NFS inseguro que expone documentos de incorporación - Severidad Media Divulgación de...

CVE-2026-105767

Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy edu from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the projectid...

CVE-2026-105691

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through childprocess.exec. A user who can edit a file can store shell metacharacters...

CVE-2026-105697

Langflow versions prior to 1.10.3 are vulnerable to OS command injection due to a lack of allowlisting in the MCP stdio transport configuration. An attacker capable of accessing MCP server settings or using the MCP Tools component can execute arbitrary OS commands (e.g., rm -rf, reverse shells) o...

CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...