Dolibarr command injection vulnerability

Versions of Dolibarr prior to 24.0.0 contain a command injection vulnerability. This vulnerability stems from an OS command injection issue in htdocs/admin/tools/export.php. Authenticated administrators can bypass the restrictoscommands allow list by crafting mysqldump values and using & characte...

CVE-2026-36698

Xovis AG APS-R-POE , APS-R-POE-PP , APS-R , APS-R-POE-USB , and APS-B (version 2.10.1.1 and earlier) are vulnerable to an OS command injection vulnerability (CWE-78) in the /sbin/ImportParamSet.sh script. The flaw exists because the script processes symlinks from uploaded parameter archive files ...

Linux Distros Unpatched Vulnerability : CVE-2026-116053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function sourcespecialcommandissafe of the file...

PT-2026-125127

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish...

Vertiv Avocent ACS8000 command injection vulnerability

Vertiv Avocent ACS8000 versions 2.32.4 and earlier contain a command injection vulnerability. This vulnerability arises because the wsserver terminal bridge daemon, which runs with root privileges, constructs shell commands from WebSocket fields provided by clients and passes them to the system a...

CentOS Linux 7 [TuxCare] Security Update: rpm / rpm-apidocs / rpm-build / rpm-build-libs / rpm-cron / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792689093)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792689093 advisory. - A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in...

RHEL 9 : lrzsz (RHSA-2026:89755)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89755 advisory. Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz...

CentOS Linux 6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792745817)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792745817 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the...

CVE-2026-36698

Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh. The script processes symlinks from uploaded parameter archive files and embeds the symlink target path into a shell command without...

Asciidoctor Include Ext 0.3.0 Command Injection

Asciidoctor Include Ext versions prior to version 0.4.0 contain a command injection vulnerability when rendering user-supplied AsciiDoc markup. This proof of concept demonstrates the issue through an include directive. https://packetstorm.news/download/237642...

PT-2026-123410

A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Such manipulation of the argument state/labels leads to os command injection. The attack can be launched remotely. Upgradin...

PT-2026-123487

Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a...

UBUNTU-CVE-2026-115586

virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until 21.14.13, the bash bin/activate script can copy an attacker-controlled --prompt value into PS1 without escaping dollar signs or backticks when both promptvars and POSIX mode are disabled during activation...

Wolfvision Cynap command injection vulnerability

Wolfvision Cynap has a command injection vulnerability stemming from improper handling of user-controlled input in its WolfProt interface implementation. This flaw may allow unauthenticated attackers with network access to execute operating system commands under the privileges of the affected...

Maki GitHub Kanban MCP Server command injection vulnerability

Maki GitHub Kanban MCP Server versions 0.4.0 and earlier contain a command injection vulnerability. This vulnerability stems from improper handling of the state/labels parameter in the handleListIssues function within the file src/handlers/issue-handlers.ts, potentially allowing os command...

vLLM input validation error vulnerability

Versions of vLLM prior to 0.32.0 contain an input validation error vulnerability. This flaw arises because ImageMediaIO fails to restrict decoder selection and MIME tags do not enforce format constraints. Attackers can exploit this by sending image bytes under their control; these can then be...

PT-2026-123447

Summary In vLLM 0.30.0, ImageMediaIO passes attacker-controlled image bytes to Pillow's format autodetection without restricting the accepted formats; the request's MIME label does not constrain decoder selection. An EPS payload labeled image/png reached the host's Ghostscript executable. On a ho...

Red Hat Data Grid 8 information disclosure vulnerability

Red Hat Data Grid 8 has an information disclosure vulnerability. This vulnerability arises because Infinispan Operator passes the passwords for keystore and truststore via plaintext command-line parameters when enabling cross-site TLS. As a result, entities with get pods privileges, node-level...

PT-2026-123129

A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function build windows command of the file docker executor.py. This manipulation of the argument project name causes os command injection. It is possible to initiate the attack remotely...

Important: lrzsz security, bug fix, and enhancement update

Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz package. Lrzsz was created to provide a working GNU copylefted Zmodem solution for Linux systems. Security Fixes: lrzsz: lrzsz: Arbitrary file overwrite via...