CVE-2026-116053 dbcli mycli Whitelist source.py source_special_command_is_safe os command injection

A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function sourcespecialcommandissafe of the file mycli/packages/special/source.py of the component Whitelist. Executing a manipulation can lead to os command injection. It is possible to launch the attac...

CVE-2026-116053

A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function sourcespecialcommandissafe of the file mycli/packages/special/source.py of the component Whitelist. Executing a manipulation can lead to os command injection. It is possible to launch the attac...

EUVD-2026-109471

A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function sourcespecialcommandissafe of the file mycli/packages/special/source.py of the component Whitelist. Executing a manipulation can lead to os command injection. It is possible to launch the attac...

CVE-2026-116053

A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function sourcespecialcommandissafe of the file mycli/packages/special/source.py of the component Whitelist. Executing a manipulation can lead to os command injection. It is possible to launch the attac...

CVE-2026-116053

A weakness in dbcli mycli versions up to 2.29.4/2.30.1 allows for OS command injection . The vulnerability exists in the source_special_command_is_safe function within the file mycli/packages/special/source.py of the Whitelist component. An attacker can execute manipulations on the local host to ...

CLSA-2026-1792933979 openssh: Fix of 4 CVEs

CVE-2026-106555: sshd kept GSSAPI client state from a partially completed authentication attempt and could reuse it in a later attempt; reset it before each attempt. Backport upstream commits 670510d1 and d549f99d. - CVE-2026-106553: sshd stored delegated GSSAPI credentials even when GSSAPI user...

CLSA-2026-1792928671 Fix CVE(s): CVE-2026-4786

SECURITY UPDATE: command-line option injection in webbrowser.open through a URL whose "%action" substitution yields a leading dash - debian/patches/CVE-2026-4519.patch: carries the fix, applied since tuxcare.els1: Lib/webbrowser.py UnixBrowser.open checks the URL after the %action substitution -...

Langflow: Code Injection Vulnerability In Code Validation Endpoint

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement...

emqx-RCE

EMQX Dashboard - RCE This is a malicious plugin for EMQX Dashboard which allows to execute commands remotely. The code in this repository is mostly based on one of the latest releases of the EMQX plugin template repository, licensed under Apache 2.0. If you would like to give this a try, you can...

ConfluenceMemshell

ConfluenceMemshell Confluence CVE 2021, 2022, 2023 exploitation tool, supports command execution, Godzilla, Behinder memory shell injection Supported Confluence versions: CVE-2021-26084, CVE-2022-26134, CVE202322515, CVE-2023-22527 If it helps you and you think it's good, please give it a big ⭐️❗️...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP 5.6 upload-progress research for CVE-2026-109618 and CVE-2...

Back to Basics: Formal Analysis Hints Improve Weak-To-Strong Monitoring

Frontier agentic systems are capable of taking misaligned actions that may cause significant harm. Monitoring techniques are developed to oversee these systems in order to detect and prevent dangerous actions. However, current state-of-the-art monitors suffer from four persistent failure modes:...

SUSE SLED15 / SLES15 Security Update : emacs (SUSE-SU-2026:4893-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4893-1 advisory. - CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927. - CVE-2026-108976: flawed username...

dbcli mycli command injection vulnerability

Versions 2.29.0, 2.29.1, 2.29.2, 2.29.3, 2.29.4, 2.30.0, and 2.30.1 of dbcli mycli contain a command injection vulnerability. This vulnerability stems from an OS command injection flaw in the sourcespecialcommandissafe function within the file mycli/packages/special/source.py in the Whitelist...

PT-2026-123051

A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function source special command is safe of the file mycli/packages/special/source.py of the component Whitelist. Executing a manipulation can lead to os command injection. It is possible to launch the...

Red Hat: CVE-2026-116148: ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing...

Exploit for OS Command Injection in N8N

CVE-2026-85168 — n8n Git node RCE via repository-local git con...

CVE-2026-115995

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function setvolume of the file gptthread.py of the component chatgo. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely...

CVE-2026-115995 Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function setvolume of the file gptthread.py of the component chatgo. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely...

EUVD-2026-109321

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function setvolume of the file gptthread.py of the component chatgo. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely...