57760 matches found
UBUNTU-CVE-2026-95832
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
CVE-2026-95832
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
CVE-2026-95832
The kitty terminal emulator (versions 0.47.3 before 0.49.0 ) is vulnerable to arbitrary command execution due to improper neutralization of special elements in the colour control escape code handler . The flaw exists because color_control() in kitty/window.py includes unrecognised field names in ...
CVE-2026-95832
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
CVE-2026-95832 Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
EUVD-2026-87065
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
CVE-2026-95832 Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
CVE-2026-95832 Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
Exploit for CVE-2026-61732
CVE-2026-61732 — Decepticon ChatML role-boundary forgery lab...
kj33-cpe-root-shell
One POST to root: the "Wi-Fi 6" 5G CPE that isn't A carrier...
MAL-2026-17175 Malicious code in n8n-nodes-flowstats (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa25eb3d56eb14b75cbb4dedbd5d09063e4b742b53acef9a4096cc77213b8f3 The package presents itself as an n8n community node that annotates items with flow statistics, but nodes/FlowStats.node.js contains two independent...
Webmin <= 1.920 - Unauthenticated Remote Command Execution
Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. id: CVE-2019-15107 info: name: Webmin = 1.920 - Unauthenticated Remote Command Execution author: bp0lr severity: critical description: Webmin =1.920. is vulnerable to an...
PT-2026-98890
Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 16.4.0 Description In the 'admin/themes standard pages.php' endpoint, the application validates uploaded logo content by MIME type but uses the attacker-controlled std pgs logo extension when creating the stored...
PT-2026-98865
Name of the Vulnerable Software and Affected Versions OnlyOffice/Document Editing affected versions not specified Description An unauthenticated remote attacker with access to a supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes. This allows the...
Redis 8.2.x < 8.2.9 / 8.4.x < 8.4.6 / 8.6.x < 8.6.6 / 8.8.x < 8.8.2 / 8.10.x < 8.10.1 Multiple Vulnerabilities
The version of Redis installed on the remote host is 8.2.x prior to 8.2.9, 8.4.x prior to 8.4.6, 8.6.x prior to 8.6.6, 8.8.x prior to 8.8.2, or 8.10.x prior to 8.10.1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability in the tlsProcessPendingData function,...
Linux Distros Unpatched Vulnerability : CVE-2026-95832
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49....
PT-2026-98841
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because color control in kitty/window.py...
CVE-2026-95832: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code handler in kitty from 0.47.3 before 0.49.0 allows a program writing to the terminal to execute an arbitrary command in the user's shell, because colorcontrol in kitty/window.py...
CVE-2026-42322: Unrestricted Upload of File with Dangerous Type
Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, admin/themesstandardpages.php validates uploaded logo content by MIME type but reuses the attacker-controlled extension from stdpgslogo when constructing the stored filename. An authenticated administrat...
CVE-2026-91838: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...