188805 matches found
CVE-2026-103431
colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local user on a monitored host to inject escape sequences into the terminal of an operator running colmux, via a crafted proce...
CLEANSTART-2025-LU26051 Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution
Security vulnerability affects the exim package. Exim supports the use of multiple "-p" command line arguments which are malloc'ed and never free'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution...
CLEANSTART-2024-RH47389 Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata
Security vulnerability affects the exiv2 package. Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata...
CLEANSTART-2024-YC31676 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...
CLEANSTART-2024-QN97923 Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files
Security vulnerability affects the exiv2 package. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files...
CVE-2026-76146
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...
CVE-2026-76146 Genians, Inc Genian SSL PNS OS Command Injection
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...
EUVD-2026-90488
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...
CVE-2026-76146 Genians, Inc Genian SSL PNS OS Command Injection
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...
CVE-2026-76146
Genian SSL PNS is subject to an OS command injection vulnerability. An attacker who possesses only the client access ID , without requiring a password, can execute arbitrary commands remotely. No specific remediation details or exploit links were provided in the documentation.
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configuration data. LevelBlue's Threat Hunt Operations & Research THOR team, which analyzed the...
CLEANSTART-2026-TD83938 malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation
Security vulnerability affects the kube-state-metrics-fips package. A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation...
CLEANSTART-2026-VA36880 "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp")
Security vulnerability affects the kube-state-metrics-fips package. The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp"...
PT-2026-103956
Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description An improper privilege management issue exists in the command shell when configured to enforce per-user command privileges. Under certain shell operations, a command may be evaluated...
PT-2026-103749
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.19422 Description An HTML injection issue exists in the VCS command failure notifications. This allows an attacker to inject malicious HTML content into the notifications triggered when a Version...
PT-2026-103977
Name of the Vulnerable Software and Affected Versions Archer AX90 V1 affected versions not specified Description An unauthenticated adjacent-network attacker can execute arbitrary operating system commands with root privileges during device boot. This is possible by exploiting the setProductVer...
PT-2026-104822
It was discovered that KCoreAddons incorrectly handled shell argument quoting in KShell::quoteArgs. The parsing did not adequately handle shell metacharacters, which could lead to a shell escape. An attacker could possibly use this issue to execute arbitrary commands in applications that relied o...
PT-2026-103798
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command...
PT-2026-103681
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...