CVE-2025-20295 Cisco UCS Manager Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This vulnerabili...

CVE-2025-20295: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This...

CVE-2025-20294: Improper Neutralization of Special Elements used in an OS Command

Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root. These vulnerabilities are...

CVE-2025-20292: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...

Linux Distros Unpatched Vulnerability : CVE-2022-39327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection...

http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by unknown CVE via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

aioload (>=0.3.2, <=0.3.3), aiosonic (>=0.5.0, <=0.5.3) +1 more potentially affected by CVE-2025-57804 via h2 (3.1.1)

h2 PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - aioload =0.3.2, =0.5.0, =1.2.1, =1.2.3 Source cves: CVE-2025-57804 Source advisory: OSV:GHSA-847F-9342-265H...

CVE-2023-47799: Exposure of Sensitive Information to an Unauthorized Actor

Mahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental HTML bulk export is used via the administration interface or via the CLI, and the resulting export files are given to the account holders. They may contain images of other account holders because the...

Linux Distros Unpatched Vulnerability : CVE-2018-15869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Amazon Web Services AWS developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source...

@cloudbase/cli (>=2.8.19, <=2.11.7) potentially affected by CVE-2025-57755 via @musistudio/claude-code-router (1.0.36)

@musistudio/claude-code-router NPM version 1.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on @musistudio/claude-code-router and may be impacted: - @cloudbase/cli =2.8.19, =2.11.7 Source cves: CVE-2025-57755 Source advisory:...

card-ocr-fastmcp (1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (1.13.0)

@wong2/mcp-cli NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp 1.0.0 Source cves: CVE-2025-9262 Source advisory: OSV:GHSA-P6RM-483J-37JF...

card-ocr-fastmcp (1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (1.13.0)

@wong2/mcp-cli NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp 1.0.0 Source cves: CVE-2025-9262 Source advisory: GHSA-P6RM-483J-37JF...

card-ocr-fastmcp (1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (1.13.0)

@wong2/mcp-cli NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp 1.0.0 Source cves: CVE-2025-9262 Source advisory: SNYK:JS-WONG2MCPCLI-12205740...

CVE-2025-9262

A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...

CVE-2025-9262

A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...

CVE-2025-9262

A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack is considered to have high complexity...

card-ocr-fastmcp (1.0.0) potentially affected by CVE-2025-9262 via @wong2/mcp-cli (1.13.0)

@wong2/mcp-cli NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on @wong2/mcp-cli and may be impacted: - card-ocr-fastmcp 1.0.0 Source cves: CVE-2025-9262 Source advisory: MEND:CVE-2025-9262...

GHSA-XH9H-692F-MMG4 Withdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module

Withdrawn Advisory This advisory has been withdrawn because the attack surface of this vulnerability is outside of Knack's intended functionality. The maintainer states the following: These CVEs are invalid. Knack is a CLI framework used by Azure CLI. It's a local library, not a web service. In...

DEBIAN-CVE-2025-54364

Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. optiondescriptions employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings containing a...

DEBIAN-CVE-2025-54363

Microsoft Knack 0.12.0 allows Regular expression Denial of Service ReDoS in the knack.introspection module. extractfullsummaryfromsignature employs an inefficient regular expression pattern: "\s:param\s+.+?\s:." that is susceptible to catastrophic backtracking when processing crafted docstrings...