27569 matches found
GHSA-C8MV-CH2P-4GWV vulnerabilities
Vulnerabilities for packages: chromium...
FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the...
PYSEC-2026-2954 PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution
Summary runpython in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c "" and passing it to subprocess.run..., shell=True. The escaping logic only handles \ and ", leaving $ and backtick substitutions unescaped, allowing arbitrary OS command executi...
PYSEC-2026-2623 mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint
Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCPALLOWANONYMOUSACCESS=true is set required for the HTTP server to function without OAuth/API key,...
PYSEC-2026-2668 MS-Agent vulnerable to Command Injection
A Command Injection vulnerability in ModelScope's MS-Agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input...
Linux Distros Unpatched Vulnerability : CVE-2026-53448
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQ...
ALSA-2026:38494 Important: buildah security update
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...
The vulnerability of the Management Daemon (MGD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to induce a service failure.
The vulnerability of the Management Daemon MGD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause service interruptions...
PT-2026-59316
A Command Injection vulnerability in ModelScope's MS-Agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input...
PT-2026-59276
Summary The /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCP ALLOW ANONYMOUS ACCESS=true is set required for the HTTP server to function without OAuth/API...
BIT-NEXTCLOUD-2021-22912
Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user...
Exploit for OS Command Injection in Devcode Openstamanager
🛡️ Hack The Box - Enigma Findings Report 📋 Overview This reposit...
CVE-2026-15495 SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection
A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java of the component Android WebSocket Server. The manipulation of the argument path leads to os command injection. The attack can be initiated remotel...
Command Injection
langroid is vulnerable to Command Injection. The vulnerability is due to the Neo4jChatAgent executing LLM-generated Cypher queries without validation, statement-type restrictions, or an opt-out mechanism, which allows an attacker to exploit prompt injection to execute arbitrary Cypher queries,...
OS Command Injection
9router is vulnerable to OS Command Injection. The vulnerability is due to improper handling of the sudoPassword parameter in the unauthenticated POST /api/tunnel/tailscale-install endpoint, which is passed to a sudo -S sh process without authorization checks, allowing a remote unauthenticated...
Photon OS 3.0: Krb5 PHSA-2023-3.0-0624
An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0624. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-53448
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQL queries via snprintf string interpolation without sanitization. The issecurestring filter that protects the STUN protocol path is not...
UBUNTU-CVE-2026-53448
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQL queries via snprintf string interpolation without sanitization. The issecurestring filter that protects the STUN protocol path is not...
FTP Fetch, Windows Meterpreter Shell, Reverse HTTPS Inline
Fetch and execute an x86 payload from an FTP server. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...
FTP Fetch, Windows Meterpreter Shell, Reverse HTTP Inline
Fetch and execute an x86 payload from an FTP server. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...