Lucene search
+L

150363 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 9:39 p.m.31 views

Malicious code in n8n-nodes-rce-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c735b8bb20a784446d7a0a4c49369ca3f2696bfe2e8a004799c763fc0a064aca On require by n8n module-load, top-level code in dist/RceNode.node.js, the package runs a shell command via execSync'/bin/sh',.... The command is tak...

6.2AI score
SaveExploits0References2
OSV
OSV
added 2026/07/13 9:39 p.m.17 views

MAL-2026-10503 Malicious code in n8n-nodes-rce-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c735b8bb20a784446d7a0a4c49369ca3f2696bfe2e8a004799c763fc0a064aca On require by n8n module-load, top-level code in dist/RceNode.node.js, the package runs a shell command via execSync'/bin/sh',.... The command is tak...

6.2AI score
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/13 7:49 p.m.9 views

Security Bulletin: Vulnerability in Pallets Click bundled with IBM Fusion and IBM Fusion HCI

Summary IBM Fusion and IBM Fusion HCI include the click library, which is affected by a command injection vulnerability. CVE-2026-7246 Vulnerability Details CVEID:CVE-2026-7246 DESCRIPTION: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit...

7.2CVSS6.2AI score0.009EPSS
SaveExploits1Affected Software2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/13 7:44 p.m.30 views

Malicious code in node-fsmetrics-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9958558a30dea32a3b0fc2e48bb775433e1f12b339030a8d21872ad058bc28ff On require, index.js hex-decodes the URL http://152.53.120.90/cmd and starts a background loop that polls /cmd/commands, executes returned strings vi...

6.1AI score
SaveExploits0References2
OSV
OSV
added 2026/07/13 5:36 p.m.11 views

MAL-2026-10465 Malicious code in node-sysmon-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612887c8528ff96b3bc3a61d678b6376099480c080d2d8a0960fe7798ac25f33 On module load, index.js reconstructs a hex-encoded URL Buffer.from'687474703a2f2f3135322e35332e3132302e39302f636d64','hex' that decodes to...

6.3AI score
SaveExploits0References3
OSV
OSV
added 2026/07/13 3:46 p.m.8 views

PYSEC-2026-2338 aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Summary aiosmtplib's SMTP.mail, SMTP.rcpt, SMTP.vrfy and SMTP.expn send the caller-supplied email address to the server without rejecting embedded CR/LF \r\n bytes. An address that contains a CR/LF is written verbatim onto the SMTP control connection, so the bytes after the CRLF are framed by the...

6.9CVSS6.2AI score
SaveExploits0References5
PyPA
PyPA
added 2026/07/13 3:46 p.m.19 views

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Summaryaiosmtplib's SMTP.mail, SMTP.rcpt, SMTP.vrfy and SMTP.expn send the caller-supplied email address to the server without rejecting embedded CR/LF \r\n bytes. An address that contains a CR/LF is written verbatim onto the SMTP control connection, so the bytes after the CRLF are framed by the...

6.9CVSS6.2AI score
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/13 3:46 p.m.11 views

PYSEC-2026-3061 Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

Summary Serena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port TCP 24282, hardcoded as 0x5EDA in constants.py. The server has no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach...

8.3CVSS6.6AI score0.00291EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/13 3:46 p.m.10 views

PYSEC-2026-2594 Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command

Summary When a check plugin places user provided input inside a command which is passed to shellexec, an attacker can abuse this to run arbitrary commands. This is mainly dangerous for plugins which are listed in the sudoers file, because this allows an attacker controlling the nagios user to get...

7.8CVSS6.3AI score
SaveExploits0References5
OSV
OSV
added 2026/07/13 3:46 p.m.13 views

PYSEC-2026-2576 Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Neo4jChatAgent passes LLM-generated Cypher queries straight to the Neo4j driver with no validation, no statement-type allowlist, and no opt-out gate. The query text is influenceable by prompt injection direct user input or indirect content the agent reads back via RAG, so an attacker who can...

9.2CVSS6.1AI score0.00383EPSS
SaveExploits2References5
OSV
OSV
added 2026/07/13 3:46 p.m.6 views

PYSEC-2026-2497 Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

Summary The Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen. securepopen is explicitly designed to interpret &&, |, and as shell operators...

7.8CVSS6.5AI score0.00142EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:46 p.m.7 views

PYSEC-2026-2486 Galaxy NG: command injection vulnerability

A command injection vulnerability was found in galaxyng. The dogitcheckout function in the legacy role import API v1 interpolates unsanitized git ref names branch/tag names into shell commands executed via subprocess.run with shell=True. An authenticated user who controls a git repository can...

7.5CVSS6.4AI score0.00889EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:19 p.m.7 views

PYSEC-2026-2464 Dulwich Vulnerable to Command Injection via Merge Driver Path

Summary Dulwich's ProcessMergeDriver substitutes the file path from the git tree, controllable by an attacker via a malicious branch into the merge driver command via the %P placeholder and executes it with subprocess.run..., shell=True. An attacker who can cause a victim to merge an untrusted...

7.7CVSS6.5AI score0.00555EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/13 3:19 p.m.9 views

PYSEC-2026-3395 python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection

Summary prepareenvironment in clicommunicationprotocol.py passes a full copy of os.environ to every CLI subprocess. When combined with the Command Injection vulnerability CWE-78 in substituteutcpargs tracked as GHSA-33p6-5jxp-p3x4, an attacker can exfiltrate all process-level secrets in a single...

7.7CVSS6.1AI score0.00223EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/13 3:15 p.m.12 views

PYSEC-2026-2501 GPT-Pilot contains a command injection vulnerability in the Executor.run() method

GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 2025-09-03 contains a command injection vulnerability CWE-78 in the Executor.run method. During project execution, when the system prompts the user to confirm or modify a command to be run, it accepts free-text input without proper...

6.5CVSS6.6AI score0.00704EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/13 3:15 p.m.5 views

PYSEC-2026-2870 pgAdmin 4: OS command injection vulnerability in Import/Export query export

OS command injection CWE-78 vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An authenticated user could inject " TO PROGRAM 'cmd'" to break out of the \copy ... context and achieve...

8.8CVSS6.3AI score0.01444EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:15 p.m.7 views

PYSEC-2026-2681 JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with ...

9.6CVSS6.6AI score0.00349EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:15 p.m.7 views

PYSEC-2026-2537 JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with ...

9.6CVSS6.6AI score0.00349EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:2 p.m.6 views

PYSEC-2026-2682 Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

Impact A stored Cross-Site Scripting XSS vulnerability in Jupyter Notebook allows attackers to steal authentication tokens from users who open malicious notebook files and interact with elements that the attacker can make look indistinguishable from legitimate controls single click interaction. T...

8.4CVSS6.3AI score0.00476EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:2 p.m.6 views

PYSEC-2026-2538 Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

Impact A stored Cross-Site Scripting XSS vulnerability in Jupyter Notebook allows attackers to steal authentication tokens from users who open malicious notebook files and interact with elements that the attacker can make look indistinguishable from legitimate controls single click interaction. T...

8.4CVSS6.3AI score0.00476EPSS
SaveExploits0References6
Rows per page
Query Builder