9080 matches found
jenkins -- multiple vulnerabilities
Jenkins Security Advisory: Description High SECURITY-3630 / CVE-2025-67635 Denial of service vulnerability in HTTP-based CLI Medium SECURITY-1809 / CVE-2025-67636 Missing permission check on password fields Medium SECURITY-783 / CVE-2025-67637 storage, CVE-2025-67638 masking Build authorization...
sd 安全漏洞
sd is a command line tool by Gregory Personal Developer A security vulnerability exists in sd 1.0.0 and earlier versions, which stems from a potential elevation of privileges to root...
Jenkins 安全漏洞
Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from not properly...
The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code
The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system arises from an operation where data is written beyond the buffer in memory as a result of executing a certificate request command. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code
The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code
The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
nitro-tpm-pcr-compute may allow kernel command line modification by an account operator
Summary Adding default PCR12 validation to ensure that account operators can not modify kernel command line parameters, potentially bypassing root filesystem integrity validation. Attestable AMIs are based on the systemd Unified Kernel Image UKI concept which uses systemd-boot to create a single...
EUVD-2025-201467
nitro-tpm-pcr-compute may allow kernel command line modification by an account operator...
GHSA-XRV8-2PF5-F3Q7 nitro-tpm-pcr-compute may allow kernel command line modification by an account operator
Summary Adding default PCR12 validation to ensure that account operators can not modify kernel command line parameters, potentially bypassing root filesystem integrity validation. Attestable AMIs are based on the systemd Unified Kernel Image UKI concept which uses systemd-boot to create a single...
EUVD-2025-201304
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...
CVE-2025-12195
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4+541730, 12.0 up to and includi...
CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...
AZL-71560 CVE-2025-65637 affecting package cf-cli for versions less than 8.4.0-26
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...
EUVD-2025-200052
Malicious code in mongodb-atlas-cli-toc-generator npm...
The vulnerability of the command-line interface (CLI) of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system, allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the command-line interface CLI of FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the FortiPAM identity management system are related to insecure privilege management. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the command-line interface (CLI) of the FortiPAM identity management system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the command-line interface CLI of the FortiPAM identity management system is related to the storage of confidential information in an open manner. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to the protected information...
CVE-2025-35028: Improper Neutralization of Special Elements used in an OS Command
By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the resultant composed command is executed directly in the context of the MCP server’s normal privilege; typically, this is root. There...
HexStrike AI MCP Agents 安全漏洞
HexStrike AI MCP Agents is an MCP server by the individual developer Muhammad Osama. HexStrike AI MCP Agents suffers from a security vulnerability that stems from not cleaning up command line parameters, which could lead to the execution of arbitrary code...
