3998 matches found
CVE-2026-47827 CVE-2026-47827 – BOSH CLI Powershell Injection
Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities...
CVE-2026-47827
CVE-2026-47827 is a command injection vulnerability in the BOSH CLI tool (Cloud Foundry) on Windows , allowing a remote attacker to execute arbitrary shell commands via PowerShell injection. All versions prior to v2.840.0 are affected. The vulnerability requires an adjacent network position and h...
vim: Vim: Arbitrary code execution via crafted zip archive entry names
A security vulnerability exists in the Vim text editor. If a user opens a specially crafted ZIP file in Vim, it can trick the application into running hidden, harmful commands on their computer. This specific issue is only triggered if Vim relies on PowerShell to open the ZIP file...
CVE-2026-47827 - BOSH CLI Powershell Injection | Cloud Foundry
HIGH CVSSv4: High 7.7 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSSv3: High 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Vendor CloudFoundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH CLI tool – All versions v2.840.0 Description Command...
BIT-POWERSHELL-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
Malicious code in o0o9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d425848ef7172faf5f84ff9bd9017bf3ab1eb2343a5301ff0df1711d091118 The package's main entry index.js imports childprocess at the top of the file and invokes spawn"powershell",... as a top-level side effect line 27...
MAL-2026-14277 Malicious code in o0o9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d425848ef7172faf5f84ff9bd9017bf3ab1eb2343a5301ff0df1711d091118 The package's main entry index.js imports childprocess at the top of the file and invokes spawn"powershell",... as a top-level side effect line 27...
GO-2026-6182 Command execution via PowerShell smart quotes in github.com/rclone/rclone
PowerShell treats several Unicode smart-quote characters U+2018, U+2019, U+201A, U+201B as single-quote delimiters in addition to ASCII apostrophe. When interpolating remote SFTP paths into PowerShell commands, rclone only escapes the ASCII apostrophe, allowing an attacker to craft a filename wit...
BIT-POWERSHELL-2026-59119 PowerShell Elevation of Privilege Vulnerability
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
BIT-POWERSHELL-2026-58612 PowerShell Information Disclosure Vulnerability
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
PT-2026-80000
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
PT-2026-79999
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
BIT-POWERSHELL-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
BIT-POWERSHELL-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
BIT-RCLONE-2026-71312 rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
PT-2026-73433
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
Exploit for Improper Authentication in Necta Wifi_Mouse_Server
WiFi Mouse Server 1.7.8.5 - RCE OSCP Optimized An optimized...
CVE-2026-50523
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
