n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host

Impact The Execute Command node in n8n allows execution of arbitrary commands on the host system where n8n runs. While this functionality is intended for advanced automation and can be useful in certain workflows, it poses a security risk if all users with access to the n8n instance are not fully...

EUVD-2025-33352

n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host...

GHSA-365G-VJW2-GRX8 n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host

Impact The Execute Command node in n8n allows execution of arbitrary commands on the host system where n8n runs. While this functionality is intended for advanced automation and can be useful in certain workflows, it poses a security risk if all users with access to the n8n instance are not fully...

CVE-2025-10239 Unintended command execution via troubleshooting scripts in Progress Flowmon

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...

EUVD-2025-33340

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...

CVE-2025-10239

Summary: CVE-2025-10239 affects Progress Flowmon prior to 12.5.5. An authenticated administrator with access to the management interface can execute additional unintended commands inside troubleshooting scripts, constituting an authenticated OS command injection risk. Documents consistently state...

CVE-2025-47347

Memory corruption while processing control commands in the virtual memory management interface...

CVE-2025-47338

Memory corruption while processing escape commands from userspace...

CVE-2025-27053

Memory corruption during PlayReady APP usecase while processing TA commands...

CVE-2025-47347 Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface...

CVE-2025-47347 Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface...

CVE-2025-47347

CVE-2025-47347 affects an automotive software platform based on QNX and Qualcomm chipsets. The issue is described as a memory corruption (also reflected as a stack-based overflow in some listings) occurring while processing control commands in the virtual memory management interface, indicating a...

EUVD-2025-33242

Memory corruption while processing control commands in the virtual memory management interface...

CVE-2025-47338 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace...

CVE-2025-47338

CVE-2025-47338 – Memory corruption occurring when processing escape commands from userspace in Qualcomm DSP Service. Multiple feeds (Red Hat, NVD, CVE lists, ENISA/CNNVD) flag a memory corruption path triggered by user-space escape command handling, with impact described as high (C/H/I/A) and CVS...

CVE-2025-47338 Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace...

EUVD-2025-33255

Memory corruption while processing escape commands from userspace...

CVE-2025-27053 Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands...

CVE-2025-27053 Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands...

CVE-2025-27053

CVE-2025-27053 : A memory corruption issue occurs in the PlayReady APP while processing Trusted Application (TA) commands. The vulnerability affects the PlayReady component and can lead to system instability or compromise. The PT-2025-41342 entry (and related sources) notes the vulnerability and ...