Lucene search
+L

2298 matches found

GithubExploit
GithubExploit
added 2026/02/06 5:06 p.m.243 views

Exploit for Argument Injection in Gnu Inetutils

No d...

9.8CVSS5.3AI score0.97993EPSS
SaveExploits68
GithubExploit
GithubExploit
added 2026/02/04 7:22 p.m.171 views

Exploit for Argument Injection in Gnu Inetutils

https://github.com/SafeBreach-Labs/CVE-2026-24061/blob/main/t...

9.8CVSS5.3AI score0.97993EPSS
SaveExploits68
GithubExploit
GithubExploit
added 2026/02/03 10:56 p.m.244 views

Exploit for CVE-2026-25130

CVE-2026-25130 – Cybersecurity AI CAI Framework Argument Inj...

9.6CVSS6.3AI score0.00831EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2026/02/03 5:57 a.m.172 views

Exploit for Argument Injection in Gnu Inetutils

No d...

9.8CVSS5.3AI score0.97993EPSS
SaveExploits68
OSV
OSV
added 2026/02/02 10:40 p.m.10 views

CVE-2026-25134 Group-Office Argument Injection in MaintenanceController::actionZipLanguage

Group-Office is an enterprise customer relationship management and groupware tool. Prior to 6.8.150, 25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage which takes a lang parameter and passes it directly to a system zip command via exec. This can be combined with uploadi...

9.4CVSS6AI score
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/02/02 10:30 a.m.216 views

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 Telnet Root Exploit & Scanner A robust, multit...

9.8CVSS7.7AI score0.97993EPSS
SaveExploits68
RedhatCVE
RedhatCVE
added 2026/01/31 9:13 p.m.14 views

CVE-2026-25130

Cybersecurity AI CAI is a framework for AI Security. In versions up to and including 0.5.10, the CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with...

9.6CVSS6.2AI score0.00831EPSS
SaveExploits3References1
NVD
NVD
added 2026/01/30 9:15 p.m.17 views

CVE-2026-25130

Cybersecurity AI CAI is a framework for AI Security. In versions up to and including 0.5.10, the CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with...

9.6CVSS0.00831EPSS
SaveExploits3References3
OSV
OSV
added 2026/01/30 8:38 p.m.9 views

GHSA-JFPC-WJ3M-QW2M CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection

Summary The CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with shell=True, allowing attackers to execute arbitrary commands on the host system. Vulnerable...

9.6CVSS6.2AI score0.00831EPSS
SaveExploits3References5
Github Security Blog
Github Security Blog
added 2026/01/30 8:38 p.m.22 views

CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection

Summary The CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with shell=True, allowing attackers to execute arbitrary commands on the host system. Vulnerable...

9.6CVSS6.2AI score0.00831EPSS
SaveExploits3References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/30 8:15 p.m.8 views

CVE-2026-25130 Cybersecurity AI vulnerable to command Injection through argument injection in find_file Agent tool

Cybersecurity AI CAI is a framework for AI Security. In versions up to and including 0.5.10, the CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with...

9.6CVSS6AI score0.00831EPSS
SaveExploits3References3
OSV
OSV
added 2026/01/30 8:15 p.m.11 views

CVE-2026-25130 Cybersecurity AI vulnerable to command Injection through argument injection in find_file Agent tool

Cybersecurity AI CAI is a framework for AI Security. In versions up to and including 0.5.10, the CAI Cybersecurity AI framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen with...

9.6CVSS6.2AI score
SaveExploits0References5
Snyk
Snyk
added 2026/01/28 8:47 p.m.14 views

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via incorrect argument escaping in the Process component when executed under MSYS2-based environments on Windows. An attacker can cause destructive file operations, such as unintended deletion of directories...

6.3CVSS5.9AI score0.00209EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/28 4:47 p.m.45 views

CVE-2026-24685

CVE-2026-24685 affects OpenProject prior to 16.6.6 and 17.0.2. The vulnerability arises in the repository diff download endpoint when rendering a single revision with git show; an attacker can inject git show options by supplying a crafted rev (e.g., rev=--output=/tmp/poc.txt), causing OpenProjec...

9.4CVSS5.8AI score0.00323EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/01/28 4:47 p.m.12 views

CVE-2026-24685 OpenProject has Argument Injection on Repository module that allows Arbitrary File Write

OpenProject is an open-source, web-based project management software. Versions prior to 16.6.6 and 17.0.2 have an arbitrary file write vulnerability in OpenProject’s repository diff download endpoint /projects/:projectid/repository/diff.diff when rendering a single revision via git show. By...

9.4CVSS5.8AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/01/28 3:41 p.m.198 views

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061: telnetd Authentication Bypass Vulnerability C...

9.8CVSS6AI score0.97993EPSS
SaveExploits68
GithubExploit
GithubExploit
added 2026/01/28 2:35 p.m.179 views

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 CVE-2026-24061 Telnet RCE Exploit For...

9.8CVSS5.9AI score0.97993EPSS
SaveExploits68
GithubExploit
GithubExploit
added 2026/01/27 8:04 p.m.252 views

Exploit for Argument Injection in Gnu Inetutils

explo...

9.8CVSS5.9AI score0.97993EPSS
SaveExploits68
RedhatCVE
RedhatCVE
added 2026/01/26 3:10 p.m.15 views

CVE-2026-22583

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement CloudPagesUrl module allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026...

9.8CVSS5.9AI score0.00685EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/26 3:10 p.m.15 views

CVE-2026-22582

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement MicrositeUrl module allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 21st, 2026...

9.8CVSS5.9AI score0.00685EPSS
SaveExploits0References1
Rows per page
Query Builder