Command Injection

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Command Injection due to improp...

ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet

Oligo Security has warned of ongoing attacks exploiting a two-year-old security flaw in the Ray open-source artificial intelligence AI framework to turn infected clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet. The activity, codenamed ShadowRay 2.0 , is an evolution...

CVE-2019-19823

creationtimestamp| type| source ---|---|--- 2025-11-20 11:50:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-19823.yaml 2025-11-21 21:02:49+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbfleu2w...

CVE-2018-13317

creationtimestamp| type| source ---|---|--- 2025-11-20 11:49:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-13317.yaml 2025-11-21 21:02:46+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbabq42b...

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...

CVE-2017-14725

creationtimestamp| type| source ---|---|--- 2025-11-20 02:20:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-14725.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb2kbc2b...

CVE-2017-17092

creationtimestamp| type| source ---|---|--- 2025-11-20 02:12:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-17092.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb5cds25...

Exploit for CVE-2025-13390

WP Directory Kit /dev/null echo "+ Auto-login successful"...

PT-2025-47646

Name of the Vulnerable Software and Affected Versions GitHub Copilot and Visual Studio Code affected versions not specified Description An issue with access control exists in GitHub Copilot and Visual Studio Code. This allows an authorized attacker to bypass a security feature over a network...

CVE-2025-10703

creationtimestamp| type| source ---|---|--- 2025-11-19 17:40:56+00:00| seen| https://gist.github.com/Darkcrai86/18d5227339eca114b21530bced841b6c 2025-11-19 19:05:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yx3qs5tc2s...

CVE-2025-13035

creationtimestamp| type| source ---|---|--- 2025-11-19 09:02:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/115575551429768240 2025-11-19 09:02:43+00:00| seen| https://gist.github.com/Darkcrai86/474957a48d87b3178f86a9cc044d968d...

CVE-2025-63878

The CVE-2025-63878 entry concerns Github Restaurant Website Restoran v1.0 with a SQL injection vulnerability exposed through the Contact Form page. The connected documents reiterate the same description and provide no concrete technical specifics beyond the vulnerability class (SQLi) and page vec...

CVE-2025-40547

creationtimestamp| type| source ---|---|--- 2025-11-18 10:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vi7gsa4d2k 2025-11-18 10:30:53+00:00| seen| https://gist.github.com/Darkcrai86/026217c1b9244ace2053b1b8ab1c4632 2025-11-21 08:52:18+00:00| published-proof-of-concept|...

Security Bulletin: NVIDIA Isaac-GR00T - November 2025

NVIDIA has released a software update for NVIDIA Isaac-GR00T. To protect your system, install software from GitHub commit 7f53666 of NVIDIA Isaac-GR00T. Go to NVIDIA Product Security...

GO-2025-4106 Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve...

GO-2025-4094 kgateway is missing xDS authorization in github.com/kgateway-dev/kgateway

kgateway is missing xDS authorization in github.com/kgateway-dev/kgateway...

GO-2025-4095 Kgateway transformation policy template can emit files from the container in github.com/kgateway-dev/kgateway

Kgateway transformation policy template can emit files from the container in github.com/kgateway-dev/kgateway...

GO-2025-4113 OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation in github.com/oauth2-proxy/oauth2-proxy

OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation in github.com/oauth2-proxy/oauth2-proxy...

GO-2025-4101 OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses in github.com/opentofu/opentofu

OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses in github.com/opentofu/opentofu...

Microsoft Patch Tuesday, November 2025 Edition

Microsoft this week pushed security updates to fix more than 60 vulnerabilities in its Windows operating systems and supported software, including at least one zero-day bug that is already being exploited. Microsoft also fixed a glitch that prevented some Windows 10 users from taking advantage of...