Exploit for CVE-2026-16723

CVE-2026-16723 fastjson 1.2.83 Remote Code Execution Replay En...

CVE-2026-117567 esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject metacharacters into target, port,...

CVE-2026-18450

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-18449

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-65213

The Supermicro BMC IPMI feature contains a vulnerability that may allow an IPMI authenticated administrator to perform Arbitrary Command Execution with superuser privileges . This flaw, identified as CWE-78 (OS Command Injection), enables the execution of commands as the operating system root use...

CVE-2026-65213 Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability

This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC...

EUVD-2026-110633

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-18449

The Supermicro BMC contains a SMCRAKP Fixed Key vulnerability where the BMC fails to properly enforce integrity and encryption requirements for IPMI commands . An attacker can craft specific packets to execute arbitrary commands during an active session. The vulnerability is associated with CWE-7...

CVE-2026-18449 Supermicro BMC contains a SMCRAKP Fixed Key vulnerability

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

EUVD-2026-110623

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

CVE-2026-116576

A flaw was found in systeminformation. On Windows systems, the library's input sanitization removes standard quotation marks but fails to filter Unicode quotation marks when constructing PowerShell commands. An attacker who can supply input to an application using this library can exploit this fl...

EUVD-2026-110536

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

CVE-2026-111422

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

PT-2026-125892

The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session...

PT-2026-127754

Summary Atlantis passes the Terraform workspace value from a pull request's atlantis.yaml into a shell command without quoting or escaping it. A contributor whose pull request is eligible for an Atlantis plan can include shell metacharacters in the workspace name and execute arbitrary commands as...

CVE-2026-111422 Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

CVE-2026-111422

The apache-airflow-providers-ssh component (versions before 7.0.1 ) contains a vulnerability in the SSHRemoteJobOperator where the environment parameter is insufficiently quoted. Because values are placed inside an already-quoted wrapper script but only quoted once, shell syntax like $(...) can b...

CVE-2026-111422

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated "environment" parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as "$..." in a value was executed on the remote SSH host. In a Dag that...

CVE-2025-13833

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...

EUVD-2025-211200

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...