Lucene search
+L

12 matches found

osv_ghsa
osv_ghsa
•added 2026/09/25 9:41 p.m.•13 views

GHSA-WRVW-254R-WPMV CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

Impact An OS command injection vulnerability exists in the PowerShell and Cmd shell wrappers provided by the CliInvoke.Specializations package the PowershellProcessInvoker/CmdProcessInvoker invokers, and the UsePowerShell/UseCmd middleware in v3 pre-release versions. The wrappers re-run a...

8.4CVSS6.5AI score0.00581EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/09/25 9:41 p.m.•21 views

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

Impact An OS command injection vulnerability exists in the PowerShell and Cmd shell wrappers provided by the CliInvoke.Specializations package the PowershellProcessInvoker/CmdProcessInvoker invokers, and the UsePowerShell/UseCmd middleware in v3 pre-release versions. The wrappers re-run a...

8.4CVSS6.6AI score0.00581EPSS
SaveExploits0References7Affected Software2
NVD
NVD
•added 2026/09/25 8:17 p.m.•16 views

CVE-2026-100368

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

8.4CVSS0.00581EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/25 7:53 p.m.•11 views

CVE-2026-100368 CliInvoke.Specializations: Command injection in PowerShell and Cmd shell wrappers

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

8.4CVSS6.3AI score
SaveExploits0References3
CVE
CVE
•added 2026/09/25 7:53 p.m.•28 views

CVE-2026-100368

The CliInvoke.Specializations .NET library contains an OS command injection vulnerability in its PowerShell and Cmd shell wrappers (specifically PowershellProcessInvoker, CmdProcessInvoker, and UsePowerShell/UseCmd middleware). The root cause is that the wrappers pass caller-controlled targets an...

8.4CVSS6.4AI score0.00581EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 7:53 p.m.•43 views

CVE-2026-100368 CliInvoke.Specializations: Command injection in PowerShell and Cmd shell wrappers

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

8.4CVSS0.00581EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 7:53 p.m.•9 views

CVE-2026-100368 CliInvoke.Specializations: Command injection in PowerShell and Cmd shell wrappers

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

8.4CVSS6.4AI score0.00581EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 7:53 p.m.•21 views

EUVD-2026-87320

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

8.4CVSS6.4AI score0.00581EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/25 7:53 p.m.•9 views

CVE-2026-100368

CliInvoke is a .NET library for invoking command-line programs, and its "CliInvoke.Specializations" packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. "CliInvoke.Specializations" versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

8.6CVSS6.4AI score0.00581EPSS
SaveExploits0References8
GitLab Advisory Database
GitLab Advisory Database
•added 2026/09/25 12:00 a.m.•24 views

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

An OS command injection vulnerability exists in the PowerShell and Cmd shell wrappers provided by the CliInvoke.Specializations package the PowershellProcessInvoker/CmdProcessInvoker invokers, and the UsePowerShell/UseCmd middleware in v3 pre-release versions. The wrappers re-run a caller-supplie...

8.4CVSS6.6AI score0.00581EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•12 views

CVE-2026-100368: Improper Neutralization of Special Elements used in an OS Command

CliInvoke is a .NET library for invoking command-line programs, and its CliInvoke.Specializations packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. CliInvoke.Specializations versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4,...

8.4CVSS6.4AI score0.00581EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•9 views

PT-2026-99106

Name of the Vulnerable Software and Affected Versions CliInvoke.Specializations versions 2.2.0 through 2.8.4 CliInvoke.Specializations versions 2.9.0 through 2.9.3 CliInvoke.Specializations versions 2.10.0 through 2.10.4 CliInvoke.Specializations versions 3.0.0-alpha.1 through 3.0.0-alpha.4...

8.4CVSS6.3AI score0.00581EPSS
SaveExploits0References12
Rows per page
Query Builder