Lucene search
+L

6336 matches found

Cvelist
Cvelist
•added 2026/01/07 11:10 p.m.•54 views

CVE-2019-25282 V-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Open Redirect via bindProfile.html

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect...

9.8CVSS0.00434EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/01/07 6:30 p.m.•21 views

terminal-controller-mcp vulnerable to Command Injection

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS6.6AI score0.02138EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/01/07 6:30 p.m.•17 views

GHSA-H4RF-624J-GJ33 terminal-controller-mcp vulnerable to Command Injection

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS8.1AI score0.02138EPSS
SaveExploits1References4
NVD
NVD
•added 2026/01/07 6:15 p.m.•21 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS0.02138EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/07 12:00 a.m.•46 views

CVE-2025-61492

The terminal-controller-mcp software (version 0.1.7 ) contains a command injection vulnerability within its execute_command function. This flaw allows an attacker to execute arbitrary system commands by providing specially crafted input . The vulnerability impacts the ability to maintain system i...

10CVSS6.6AI score0.02138EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•20 views

PT-2026-1826

Name of the Vulnerable Software and Affected Versions terminal-controller-mcp version 0.1.7 Description A command injection issue exists in the execute command function of the software. Attackers can execute arbitrary commands by providing a crafted input. The vulnerability can lead to arbitrary...

10CVSS8.4AI score0.02138EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•4 views

CVE-2025-61492: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS6.3AI score0.02138EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/01/07 12:00 a.m.•8 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

6.6AI score0.02138EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/07 12:00 a.m.•13 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS6.2AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/07 12:00 a.m.•44 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

0.02138EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/06 3:52 p.m.•10 views

CVE-2020-36915 Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec...

8.7CVSS8.3AI score0.00385EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•45 views

PT-2026-1449

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec...

8.7CVSS7.8AI score0.00385EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2026/01/03 12:00 a.m.•18 views

The vulnerability of the command-line interface (CLI) of NPort terminal server software products, models 6100-G2/6200-G2, allows a hacker to alter the device’s configuration data.

The vulnerability of the command-line interface CLI of NPort terminal server software for models 6100-G2/6200-G2 is related to deficiencies in the access control mechanism. Exploiting this vulnerability could allow a malicious actor to alter the device’s configuration data remotely...

9CVSS5.7AI score0.00348EPSS
SaveExploits0References2Affected Software2
Fedora
Fedora
•added 2026/01/02 12:57 a.m.•20 views

[SECURITY] Fedora 42 Update: direwolf-1.8.1-1.fc42

Dire Wolf is a modern software replacement for the old 1980's style TNC built with special hardware. Without any additional software, it can perform as an APRS GPS Tracker, Digipeater, Internet Gateway IGate, APRStt gateway. It can also be used as a virtual TNC for other applications such as...

8.7CVSS5.8AI score0.00509EPSS
SaveExploits0
Fedora
Fedora
•added 2026/01/02 12:41 a.m.•23 views

[SECURITY] Fedora 43 Update: direwolf-1.8.1-1.fc43

Dire Wolf is a modern software replacement for the old 1980's style TNC built with special hardware. Without any additional software, it can perform as an APRS GPS Tracker, Digipeater, Internet Gateway IGate, APRStt gateway. It can also be used as a virtual TNC for other applications such as...

8.7CVSS5.8AI score0.00509EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/01/01 5:04 a.m.•206 views

Exploit for CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 Command injection via unsa...

6.6CVSS7.1AI score0.01195EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2026/01/01 12:24 a.m.•11 views

SUSE CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

3.3CVSS5.6AI score0.00453EPSS
SaveExploits0References10
OSV
OSV
•added 2025/12/30 5:44 p.m.•19 views

GHSA-59PP-R3RG-353G Composer is vulnerable to ANSI sequence injection

Impact Attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit...

5.1CVSS5.7AI score0.00453EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2025/12/30 5:44 p.m.•17 views

Composer is vulnerable to ANSI sequence injection

Impact Attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit...

5.3CVSS5.7AI score0.00453EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2025/12/30 4:15 p.m.•9 views

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS0.00453EPSS
SaveExploits0References5
Rows per page
Query Builder