92 matches found
GHSA-68MJ-5WR7-6FGG vulnerabilities
Vulnerabilities for packages: thingsboard, cassandra-reaper, druid, logstash, zipkin...
EUVD-2026-59804
Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...
CVE-2026-73055
Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...
CVE-2026-73055
Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...
CVE-2026-73651 vulnerabilities
Vulnerabilities for packages: redisinsight...
GO-2023-1730 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2024-2617 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2025-3845 vulnerabilities
Vulnerabilities for packages: gatus...
GHSA-FQJ9-69PF-6PJG vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71849 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, langfuse, langfuse-fips, kibana...
EUVD-2026-36312
OpenClaw: Combined POSIX shell options could confuse exec revalidation...
OS Command Exec, Unix Command Shell, Bind TCP (via socat)
Execute an OS command from PHP. Creates an interactive shell via socat Module Options msf use payload/php/unix/cmd/bindsocattcp msf payloadbindsocattcp show actions ...actions... msf payloadbindsocattcp set ACTION msf payloadbindsocattcp show options ...show and set options... msf...
CVE-2026-30302
The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems from the incorrect use of an incompatible command parser the Unix-based shell-quote library to analyze commands on the...
CVE-2026-30302
The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems from the incorrect use of an incompatible command parser the Unix-based shell-quote library to analyze commands on the...
CVE-2026-30303
The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems from the incorrect use of an incompatible command parser the Unix-based shell-quote library to analyze commands on the...
Exploit for CVE-2025-55182
React2Shell Scanner High Fidelity Detection & Exploitation To...
EUVD-2000-1119
Malware in sbrugna...