cirro

Cirro is an extensible security research platform that enables researchers and penetration testers to collect, analyze, and visualize cloud environments and identity relationships through graph databases. Built with a modular architecture, Cirro can be extended to support multiple platforms and...

CVE-2026-117560

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560

The ATXP Gemini CLI extension (through version 1.0.0 ) contains an OS command injection vulnerability within the runAtxp() function. The root cause is the processing of unsanitized MCP tool parameters , which allows an attacker to execute shell commands as the user. Specifically, attackers can pl...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

EUVD-2026-110838

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $ or backtick substitutions into parameters...

PT-2026-126419

Name of the Vulnerable Software and Affected Versions ATXP Gemini CLI extension versions prior to 1.0.1 Description An OS command injection issue exists in the runAtxp function. The software fails to sanitize MCP tool parameters, allowing attackers to execute shell commands as the user. This can ...

gh-legitify

gh-legitify GitHub CLI extension for Strengthen the security posture of your source-code management! Detect and remediate misconfigurations, security and compliance issues across all your GitHub and GitLab assets with ease 🔥 by Legit Security. Install gh extension install legit-labs/gh-legitify...

Security Updates for Azure DevOps CLI Extension (October 2026)

The Azure DevOps CLI extension for Microsoft Azure CLI installed on the remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability: - Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a...

CVE-2026-22718 Command injection vulnerability

The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine...

CVE-2021-24087

Azure IoT CLI extension Elevation of Privilege Vulnerability...

Privilege escalation

Azure IoT CLI extension Elevation of Privilege Vulnerability...

CVE-2021-24087

Azure IoT CLI extension Elevation of Privilege Vulnerability...

CVE-2021-24087: Improper Privilege Management

Azure IoT CLI extension Elevation of Privilege Vulnerability...

Microsoft Azure IoT CLI Authorization Issues Vulnerability

Microsoft Azure IoT is a centralized managed service from Microsoft Corporation USA. for bi-directional communication between IoT applications and their managed devices. An authorization issue vulnerability exists in the Microsoft Azure IoT CLI. The following products and versions are affected:...