Lucene search
+L

4970 matches found

NVD
NVD
added 2026/01/07 6:15 p.m.12 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS0.01891EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.11 views

PT-2026-1826

Name of the Vulnerable Software and Affected Versions terminal-controller-mcp version 0.1.7 Description A command injection issue exists in the execute command function of the software. Attackers can execute arbitrary commands by providing a crafted input. The vulnerability can lead to arbitrary...

10CVSS8.4AI score0.01891EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
added 2026/01/07 12:0 a.m.4 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

7.7AI score0.01891EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/07 12:0 a.m.28 views

CVE-2025-61492

The CVE describes a command injection in terminal-controller-mcp 0.1.7, specifically in the execute_command function. Attackers can inject commands via crafted input to achieve arbitrary command execution, with the CVSSv3.1 scoring indicating network access, low attack complexity, and no privileg...

10CVSS7.7AI score0.01891EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/01/07 12:0 a.m.33 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

0.01891EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/07 12:0 a.m.7 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS6.2AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/01/06 3:52 p.m.3 views

CVE-2020-36915 Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec...

8.7CVSS7.5AI score0.00336EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.27 views

PT-2026-1449

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec...

8.7CVSS7.8AI score0.00336EPSS
SaveExploits1References7
Fedora
Fedora
added 2026/01/02 12:57 a.m.9 views

[SECURITY] Fedora 42 Update: direwolf-1.8.1-1.fc42

Dire Wolf is a modern software replacement for the old 1980's style TNC built with special hardware. Without any additional software, it can perform as an APRS GPS Tracker, Digipeater, Internet Gateway IGate, APRStt gateway. It can also be used as a virtual TNC for other applications such as...

8.7CVSS6.7AI score0.00445EPSS
SaveExploits0
Fedora
Fedora
added 2026/01/02 12:41 a.m.11 views

[SECURITY] Fedora 43 Update: direwolf-1.8.1-1.fc43

Dire Wolf is a modern software replacement for the old 1980's style TNC built with special hardware. Without any additional software, it can perform as an APRS GPS Tracker, Digipeater, Internet Gateway IGate, APRStt gateway. It can also be used as a virtual TNC for other applications such as...

8.7CVSS6.7AI score0.00445EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/01 5:4 a.m.192 views

Exploit for CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 Command injection via unsa...

6.6CVSS8.2AI score0.01195EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2026/01/01 12:24 a.m.5 views

SUSE CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

3.3CVSS6.7AI score0.00421EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/30 5:44 p.m.11 views

GHSA-59PP-R3RG-353G Composer is vulnerable to ANSI sequence injection

Impact Attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit...

5.1CVSS6.7AI score0.00421EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2025/12/30 5:44 p.m.12 views

Composer is vulnerable to ANSI sequence injection

Impact Attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit...

5.3CVSS6.8AI score0.00421EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2025/12/30 4:15 p.m.6 views

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS0.00421EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2025/12/30 4:15 p.m.6 views

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS5.9AI score0.00421EPSS
SaveExploits0References6
OSV
OSV
added 2025/12/30 4:15 p.m.6 views

UBUNTU-CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS5.8AI score0.00421EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/12/30 4:11 p.m.48 views

CVE-2025-67746 Composer vulnerable to ANSI sequence injection

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS0.00421EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/12/30 4:11 p.m.8 views

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS5.4AI score0.00421EPSS
SaveExploits0
EUVD
EUVD
added 2025/12/30 7:32 a.m.6 views

EUVD-2025-205694

A vulnerability was identified in Tenda M3 1.0.0.134903. This vulnerability affects the function formSetAdPushInfo of the file /goform/setAdPushInfo. The manipulation of the argument mac/terminal leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit ...

9CVSS8.7AI score0.00644EPSS
SaveExploits1References6
Rows per page
Query Builder