Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•1 views

CVE-2026-30311: Improper Neutralization of Special Elements used in an OS Command

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations...

9.8CVSS6.1AI score0.02158EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•1 views

CVE-2026-30314: Improper Neutralization of Special Elements used in an OS Command

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations...

9.8CVSS6.1AI score0.02158EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•1 views

CVE-2026-30305: Improper Control of Generation of Code

Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, it...

9.8CVSS6.1AI score0.02158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/30 12:00 a.m.•6 views

CVE-2026-30305

Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, it...

6.3AI score0.02158EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•17 views

Syntx 安全漏洞

Syntx is an artificial intelligence-based data analysis and automated decision-making platform developed by Syntx Corporation. There is a security vulnerability in Syntx; this vulnerability stems from the command automatic approval module’s susceptibility to OS command injection, which may lead t...

9.8CVSS6.1AI score0.02158EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/30 12:00 a.m.•21 views

CVE-2026-30305

The Syntx command auto-approval module is vulnerable to a critical OS command injection vulnerability. The root cause is the use of fragile regular expressions that fail to account for standard Shell command substitution syntax, such as $(...) and backticks . An attacker can craft a command (e.g....

6.3AI score0.02158EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder