Exploit for Command Injection in Microsoft

CVE-2025-54100 - PowerShell Response Parsing PoC This reposit...

Exploit for CVE-2025-54100

CVE-2026-0386 Powershell's curl uses Invoke-WebRequest u...

KB5074353: Security Update for Windows PowerShell (OS Build 20348.4467)

KB5074353: Security Update for Windows PowerShell OS Build 20348.4467 Applies To Windows Server 2022 Datacenter: Azure Edition For information about Windows update terminology, see types of Windows updates and the monthly quality update types. To find an overview of Windows Server 2022, see the...

December 9, 2025—KB5071547 (OS Build 20348.4529)

December 9, 2025—KB5071547 OS Build 20348.4529 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5071547, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences...

wasmtime:wast_tests: Crash in wasmtime::runtime::func::invoke_wasm_and_catch_traps::h953b03e393d1c21c

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5050467068739584 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: wasttests Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x790b9d5e34a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414637)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414637 advisory. An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RP...

EUVD-2025-7093

Malicious code in bioql PyPI...

EUVD-2025-7057

Malicious code in bioql PyPI...

EUVD-2023-47944

Malicious code in bioql PyPI...

EUVD-2024-19178

Malicious code in bioql PyPI...

Invoke security vulnerabilities

Invoke is a leading creative engine for stabilizing diffusion models open-sourced by InvokeAI. A security vulnerability exists in Invoke v6.0.0a1 and earlier versions, which stems from the GET /api/v1/images/download/bulkdownloaditemname endpoint that does not properly handle the filename...

CVE-2023-53291

In the Linux kernel, the following vulnerability has been resolved: rcu/rcuscale: Stop kfreescalethread threads after unloading rcuscale Running the 'kfreercutest' test case 1 results in a splat 2. The root cause is the kfreescalethread threads continue running after unloading the rcuscale module...

Linux Distros Unpatched Vulnerability : CVE-2018-10992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows...

Linux Distros Unpatched Vulnerability : CVE-2024-38572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmiinvokehandler Currently, there is no terminator...

CVE-2025-21485: Time-of-check Time-of-use (TOCTOU) Race Condition

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...

PT-2025-23582 · Fastrpc · Fastrpc

Name of the Vulnerable Software and Affected Versions: FastRPC affected versions not specified Description: The issue is related to memory corruption that occurs while processing INIT and multimode invoke IOCTL calls on FastRPC. Recommendations: At the moment, there is no information about a newe...

CVE-2023-23638

A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.21 and prior versions; Apache Dubbo 3.0.x version 3.0.13 and prior versions; Apache Dubbo 3.1.x version 3.1.5 and prior versions...

CVE-2012-1291

Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerServletGlobally property in the servletjsp service...

CVE-2024-12029

A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious cod...

CVE-2024-10821

A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...