CVE-2025-32766

A stack-based buffer overflow vulnerability CWE-121 in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or commands via crafted CLI commands...

SUSE-SU-2025:02769-1 Security update for amber-cli

This update for amber-cli fixes the following issues: - Update to version 1.13.1+git20250329.c2e3bb8: CVE-2025-30204: Fixed jwt-go excessive memory allocation during header parsing bsc1240511 jwt version upgrade 174 Update policy size limit to 20k 173 Update tenant user model with latest changes...

windmill-cli (>=0.0.1, <=0.0.8) potentially affected by CVE-2025-55152 via @oakserver/oak (14.1.0)

@oakserver/oak NPM version 14.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @oakserver/oak and may be impacted: - windmill-cli =0.0.1, =0.0.8 Source cves: CVE-2025-55152 Source advisory: GHSA-R3V7-PC4G-7XP9...

windmill-cli (>=0.0.1, <=0.0.8) potentially affected by CVE-2025-55152 via @oakserver/oak (14.1.0)

@oakserver/oak NPM version 14.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @oakserver/oak and may be impacted: - windmill-cli =0.0.1, =0.0.8 Source cves: CVE-2025-55152 Source advisory: OSV:GHSA-R3V7-PC4G-7XP9...

CVE-2025-47857: Improper Neutralization of Special Elements used in an OS Command

A improper neutralization of special elements used in an os command 'os command injection' vulnerability CWE-78 in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands...

CVE-2025-32766: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability CWE-121 in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or commands via crafted CLI commands...

Remote unauthenticated command injection

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiSIEM may allow an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests. Practical exploit code for this vulnerability was found in the wil...

PT-2025-32881 · Fortinet · Fortiweb Cli

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 Fortinet FortiWeb CLI versions prior to 7.4.8 Description: A flaw exists in the improper neutralization of special elements used in an operating system command, specifically an OS command...

CVE-2025-27759: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code o...

CVE-2025-25256: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0 through 7.0.3, FortiSIEM 6.7.0 through 6.7.9,...

Stack buffer overflow in CLI command

A stack-based buffer overflow vulnerability CWE-121 in FortiWeb CLI may allow a privileged attacker to execute arbitrary code or commands via crafted CLI commands...

Fortinet FortiWeb CLI security vulnerabilities

Fortinet FortiWeb CLI is a command line interface from Fortinet, Inc. A security vulnerability exists in Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 and prior to 7.4.8, which originates from a stack buffer overflow and could lead to the execution of arbitrary code...

Command injection in CLI

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiWeb may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI commands...

Command injection in CLI command

A improper neutralization of special elements used in an os command 'os command injection' vulnerability CWE-78 in FortiWeb CLI may allow a privileged attacker to execute arbitrary code or command via crafted CLI commands...

Pocsuite

This project is an open-sourced remote vulnerability testing and proof-of-concept development framework called Pocsuite, developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine and many niche features for penetration testers and security researchers. The framework...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, cluster-api-azure-controller, terraform-provider-sendgrid, harbor, rqlite-fips, thanos-operator-fips, temporal-fips, trivy-operator, consul-k8s-fips, cert-manager-istio-csr, trivy, thanos, dex, hugo-fips, nvidia-nsight-compute-12.9,...

windmill-cli (>=0.0.1, <=0.0.13) potentially affected by CVE-2025-55152 via @oakserver/oak (>=12.6.2, <=14.1.0)

@oakserver/oak NPM version =12.6.2, =0.0.1, =0.0.13 Source cves: CVE-2025-55152 Source advisory: SNYK:JS-OAKSERVEROAK-11735294...

CVE-2025-54417

Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a vulnerability that can bypass CVE-2025-23209: "Craft CMS has a potential RCE with a compromised security key". To exploit this vulnerability, the project must meet these...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: apache-nifi, thingsboard, keycloak-config-cli, jenkins, dependency-track, sonarqube, wildfly, apicurio-registry...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: commercial-elasticsearch, jenkins, sonarqube, wildfly, apache-nifi, keycloak-config-cli, apicurio-registry, dependency-track, elasticsearch, elasticsearch-fips, thingsboard, geoserver...