Lucene search
+L

8358 matches found

Citrix
Citrix
added 2025/06/02 12:0 a.m.17 views

NetScaler: FQDN based service is Down

FQDN based service is not coming UP and showing Server State as DOWN The Monitor status might be "Domain name not resolved" But from CLI, if you tried to resolve the hostname it might show the response...

7AI score
SaveExploits0
Cvelist
Cvelist
added 2025/05/30 6:45 p.m.21 views

CVE-2025-48938 Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URL...

6.5CVSS0.00462EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/30 6:45 p.m.9 views

CVE-2025-48938 Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URL...

6.5CVSS6.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/05/30 6:45 p.m.10 views

CVE-2025-48938 Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URL...

6.5CVSS6.7AI score0.00462EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/05/30 6:45 p.m.10 views

CVE-2025-48938

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URL...

9.8CVSS5.6AI score0.00462EPSS
SaveExploits0
OSV
OSV
added 2025/05/30 3:30 p.m.5 views

GHSA-G9F5-X53J-H563 Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

Summary A security vulnerability has been identified in go-gh where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing. Details The GitHub CLI and CLI...

9.8CVSS7.6AI score0.00462EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/05/30 3:30 p.m.17 views

Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

Summary A security vulnerability has been identified in go-gh where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing. Details The GitHub CLI and CLI...

9.8CVSS7.6AI score0.00462EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2025/05/30 12:0 a.m.8 views

go-gh 安全漏洞

go-gh is a collection of Go modules open sourced from the GitHub CLI. It is used to interact with gh and GitHub APIs from the command line. A security vulnerability exists in go-gh versions prior to 2.12.1, which stems from an attacker-controlled GitHub Enterprise Server could lead to the executi...

9.8CVSS6.8AI score0.00462EPSS
SaveExploits0References4
Veracode
Veracode
added 2025/05/29 11:11 a.m.10 views

OS Command Injection

LLama-Index CLI is vulnerable to OS Command Injection. The vulnerability is due to improper input handling due to unsanitized use of the --files argument passed directly into os.system, allowing arbitrary command execution...

7.8CVSS7.1AI score0.0103EPSS
SaveExploits1References4Affected Software1
vulnersOsv
vulnersOsv
added 2025/05/28 12:30 p.m.7 views

airunner (>=3.0.0 <=3.1.7), athina (>=1.7.0 <=1.7.39) +26 more potentially affected by CVE-2025-1753 via llama-index-cli (>=0.1.13 <=0.4.0)

llama-index-cli PYPI version =0.1.13, =3.0.0, =1.7.0, =0.1.3, =0.1.169, =0.1.0, =0.3.0, =0.0.52, =1.0.9, =1.0.3.post1, =0.1.2, =0.1.7.dev20240924104148, =0.11.0, =0.11.23 - llama-index-callbacks-honeyhive =0.2.0 - llama-index-collection =0.2.0 and more Source cves: CVE-2025-1753 Source advisory:...

7.8CVSS7AI score0.0103EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2025/05/28 12:30 p.m.20 views

LLama-Index CLI OS command injection vulnerability

LLama-Index CLI prior to v0.4.1, corresponding to LLama-Index prior to v0.12.21, contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this...

7.8CVSS8.2AI score0.0103EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2025/05/28 10:15 a.m.17 views

CVE-2025-1753

LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this argument can inject and execute arbitrary shell...

7.8CVSS0.0103EPSS
SaveExploits1References2
PyPA
PyPA
added 2025/05/28 10:15 a.m.8 views

PYSEC-2025-246

LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this argument can inject and execute arbitrary shell...

7.8CVSS7.4AI score0.0103EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/05/28 9:34 a.m.29 views

CVE-2025-1753 Command Injection in LLama-Index CLI in run-llama/llama_index

LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this argument can inject and execute arbitrary shell...

7.8CVSS0.0103EPSS
SaveExploits1References2
CVE
CVE
added 2025/05/28 9:34 a.m.84 views

CVE-2025-1753

CVE-2025-1753 affects the LLama-Index CLI version v0.12.20. The vulnerability stems from the improper handling of the --files argument, which is directly passed into os.system, enabling an attacker who controls the content of this argument to inject and execute arbitrary shell commands. Impact ca...

7.8CVSS8.4AI score0.0103EPSS
SaveExploits1References2Affected Software1
Snyk
Snyk
added 2025/05/28 9:34 a.m.5 views

Command Injection

Overview llama-index-cli is a llama-index cli Affected versions of this package are vulnerable to Command Injection through the CLI interface due to pasting the --files argument directly into os.system. An attacker who controls the content of this argument can execute arbitrary commands on the...

8.5CVSS7.9AI score0.0103EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/05/28 9:34 a.m.17 views

CVE-2025-1753 Command Injection in LLama-Index CLI in run-llama/llama_index

LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this argument can inject and execute arbitrary shell...

7.8CVSS8.2AI score0.0103EPSS
SaveExploits1References2
OSV
OSV
added 2025/05/28 9:34 a.m.7 views

CVE-2025-1753 Command Injection in LLama-Index CLI in run-llama/llama_index

LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this argument can inject and execute arbitrary shell...

7.8CVSS7.7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/05/28 12:0 a.m.7 views

PT-2025-23074

Name of the Vulnerable Software and Affected Versions LLama-Index CLI version v0.12.20 Description The LLama-Index CLI contains an OS command injection issue due to the improper handling of the --files argument, which is directly passed into os.system. This allows an attacker who controls the...

7.8CVSS7.6AI score0.0103EPSS
SaveExploits1References15
SUSE CVE
SUSE CVE
added 2025/05/27 1:10 a.m.5 views

SUSE CVE-2025-48056

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output...

5.3CVSS6.7AI score0.00261EPSS
SaveExploits0References3
Rows per page
Query Builder