Lucene search
+L

935 matches found

Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•24 views

PT-2026-63527

A vulnerability was detected in publint up to 0.1.4. This impacts the function child process.exec of the file src/node/pack.js of the component package-manager Command Handler. The manipulation results in os command injection. Attacking locally is a requirement. The exploit is now public and may ...

5.3CVSS5.3AI score0.01083EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2026/07/20 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-63888

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in the Text-phase handler, both present since the original LIO...

9.8CVSS8AI score0.00778EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/09 11:11 a.m.•16 views

OESA-2026-2961 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

9.8CVSS6.3AI score0.00801EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/09 11:11 a.m.•18 views

OESA-2026-2959 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

9.8CVSS6.3AI score0.00801EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/09 11:11 a.m.•21 views

OESA-2026-2960 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

9.8CVSS6.3AI score0.00801EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/06 2:16 a.m.•32 views

CVE-2026-14787

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmdprint in the library libr/core/cmdprint.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made availab...

7.8CVSS0.00205EPSS
SaveExploits1References7
OSV
OSV
•added 2026/07/06 1:30 a.m.•17 views

CVE-2026-14787 radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmdprint in the library libr/core/cmdprint.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made availab...

4.8CVSS5.4AI score
SaveExploits0References9
CVE
CVE
•added 2026/07/06 1:30 a.m.•50 views

CVE-2026-14787

Radare2 (radare2) up to version 6.1.6 is affected. The issue is a vulnerability in the cmd_print function (libr/core/cmd_print.inc) of the PB Print Command Handler that allows an integer overflow when triggered by local input. An attacker with local access could exploit this; public PoC/exploit m...

7.8CVSS4.6AI score0.00205EPSS
SaveExploits1References7Affected Software1
AlpineLinux
AlpineLinux
•added 2026/07/06 1:30 a.m.•33 views

CVE-2026-14787

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmdprint in the library libr/core/cmdprint.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made availab...

7.8CVSS4.6AI score0.00205EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/06 12:00 a.m.•2 views

CVE-2026-14787: Integer Overflow or Wraparound

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmdprint in the library libr/core/cmdprint.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made availab...

7.8CVSS4.9AI score0.00205EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2026/07/06 12:00 a.m.•21 views

CVE-2026-14787

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmdprint in the library libr/core/cmdprint.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made availab...

7.8CVSS5.5AI score0.00205EPSS
SaveExploits1References9
CVE
CVE
•added 2026/07/02 11:08 p.m.•65 views

CVE-2026-13053

WatchGuard Fireware OS has an authenticated out-of-bounds write vulnerability in the CLI command handler (CVE-2026-13053). A privileged, authenticated attacker could trigger code execution via a crafted CLI input. Affected versions include Fireware OS 11.0–11.12.4_Update1, 12.0–12.12, and 2025.1–...

8.6CVSS6.5AI score0.00642EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/07/02 11:08 p.m.•63 views

CVE-2026-13053 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

8.6CVSS0.00642EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/02 11:08 p.m.•19 views

CVE-2026-13053 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

8.6CVSS6.5AI score0.00642EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/05/11 8:27 p.m.•18 views

CVE-2026-8235

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. The exploit is now public and may be used. The patch is...

5.5CVSS5.7AI score0.03583EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/10 7:16 a.m.•52 views

CVE-2026-8235

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. The exploit is now public and may be used. The patch is...

5.5CVSS0.03583EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/05/10 6:15 a.m.•10 views

CVE-2026-8235

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. The exploit is now public and may be used. The patch is...

5.5CVSS5.7AI score0.03583EPSS
SaveExploits0References8Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/10 12:00 a.m.•26 views

PT-2026-39463

Name of the Vulnerable Software and Affected Versions 8421bit MiniClaw versions 0.8.0 through 0.9.0 Description An OS command injection issue exists within the System Command Handler component. The flaw is located in the resolveSkillScriptPath function of the src/kernel.ts file, where improper...

5.5CVSS6.2AI score0.03583EPSS
SaveExploits0References16
CNNVD
CNNVD
•added 2026/05/10 12:00 a.m.•37 views

MiniClaw 命令注入漏洞

MiniClaw is an AI memory and evolution tool developed by a personal developer. Versions 0.8.0 and 0.9.0 of MiniClaw contain command injection vulnerabilities. These vulnerabilities stem from the function resolveSkillScriptPath in the System Command Handler component’s src/kernel.ts file, which...

5.5CVSS6.1AI score0.03583EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/10 12:00 a.m.•2 views

CVE-2026-8235: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. The exploit is now public and may be used. The patch is...

5.5CVSS5.5AI score0.03583EPSS
SaveExploits0References3
Rows per page
Query Builder