12900 matches found
Exploit for CVE-2025-55182
🔍 Phoenix SCA Scanner - Universal - Version for CVE-2025-55182...
CVE-2025-12196: Out-of-bounds Write
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...
PT-2025-49156
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.4 WatchGuard Fireware OS versions 12.5 through 12.5.13 WatchGuard Fireware OS versions 2025.1 through 2025.1.2 Description An out-of-bounds write issue exists in the Command Line Interface CLI...
CVE-2025-12195: Out-of-bounds Write
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands...
WatchGuard Fireware OS 安全漏洞
WatchGuard Fireware OS is a software from WatchGuard USA that runs on Firebox. A security vulnerability exists in WatchGuard Fireware OS versions 12.11.4 and earlier, 12.5.13 and earlier, and 2025.1.2 and earlier, which stems from an out-of-bounds write to the CLI that could lead to the execution...
CVE-2025-66032: Improper Neutralization of Special Elements used in a Command
Claude Code is an agentic coding tool. Prior to 1.0.93, Due to errors in parsing shell commands related to $IFS and short CLI flags, it was possible to bypass the Claude Code read-only validation and trigger arbitrary code execution. Reliably exploiting this requires the ability to add untrusted...
BIT-FLUX-2022-36035 Flux CLI Workload Injection
Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration like Git repositories, and automating updates to configuration when there is new code to deploy. Flux CLI allows users to deploy Flux components into a Kubernetes cluster via command-line. The vulnerability allow...
Command Injection
Overview caffeinated-whale-cli is an A CLI tool to help manage Frappe Docker instances. Affected versions of this package are vulnerable to Command Injection due to improper validation and sanitization of user-supplied site names and bench path inputs in the unlock command. The command constructs...
Incorrect Default Permissions
Overview caffeinated-whale-cli is an A CLI tool to help manage Frappe Docker instances. Affected versions of this package are vulnerable to Incorrect Default Permissions due to insecure file permissions. The cache directory and database file are created without enforcing restrictive access...
Malicious code in multer-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653a6b2d3d4620d665c1de60de57e8b94bdc7e3521eb42323c38bd3f5a6c2989 The package multer-cli was found to contain malicious code. Source: ghsa-malware 09308572c706ad725ba1ffe9eba38c5dafc921c2b48e5f8c14e2a2374839e0e5 Any...
cloudmesh-client (>=4.5.0, <=4.7.3), nirum (>=0.0.1, <=0.3.8) +4 more potentially affected by CVE-2025-66221 via werkzeug (0.11.15)
werkzeug PYPI version 0.11.15 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - cloudmesh-client =4.5.0, =0.0.1, =0.4.3, =1.0.0, =0.8.0, =0.1.14, =0.1.20 Source cves: CVE-2025-66221 Source advisory: OSV:GHSA-HGF8-39GV-G3F2...
Malicious code in mongodb-atlas-cli-toc-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43eaf31369a3ecfac60651fb3c08bc314680fd9b476179d902bbfee64b0d62 The package mongodb-atlas-cli-toc-generator was found to contain malicious code...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...
[SECURITY] Fedora 41 Update: docker-buildx-0.30.1-1.fc41
Docker CLI plugin for extended build capabilities with BuildKit...
org.apache.hive.hcatalog:hive-hcatalog-core (4.1.0), org.apache.hive.hcatalog:hive-hcatalog-pig-adapter (4.1.0) +10 more potentially affected by CVE-2025-62728 via org.apache.hive:hive-metastore (4.1.0)
org.apache.hive:hive-metastore MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-metastore and may be impacted: - org.apache.hive.hcatalog:hive-hcatalog-core 4.1.0 -...
[SECURITY] Fedora 42 Update: docker-buildx-0.30.1-1.fc42
Docker CLI plugin for extended build capabilities with BuildKit...
[SECURITY] Fedora 43 Update: docker-buildx-0.30.1-1.fc43
Docker CLI plugin for extended build capabilities with BuildKit...
