AZL-75512 CVE-2026-24827 affecting package lua for versions less than 5.4.4-2

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

CVE-2026-24827 Out-of-bounds write in Commander-Genius

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

CVE-2026-24827

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

EUVD-2026-4827

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

CVE-2026-24827 Out-of-bounds write in Commander-Genius

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

CVE-2026-24827

CVE-2026-24827 is an Out-of-bounds Write vulnerability in gerstrong Commander-Genius. The issue affects Commander-Genius prior to Release refs/pull/358/merge. Connected data indicates the Lua package is affected for versions less than 5.4.4-2, with a patched package available (Lua 5.4.4-2 or newe...

CVE-2026-24827 Out-of-bounds write in Commander-Genius

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

PT-2026-4902

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

Commander Genius security vulnerabilities

Commander Genius is a computer game developed by Gerhard Stein alone. There is a security vulnerability in Commander-Genius, which stems from an issue of out-of-bound writing...

CVE-2021-33213

An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address...

CVE-2021-0126

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

Malicious Package

Overview commander-stable is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in space-commander (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192917 Malicious code in space-commander (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

EUVD-2025-204717

Malicious code in commander-stable npm...

MAL-2025-192687 Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

CVE-2025-14508

The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint in all versions up to, and including, 2.3.1. This is due to the endpoint using uploadfiles capabilit...

CVE-2025-14508

The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint in all versions up to, and including, 2.3.1. This is due to the endpoint using uploadfiles capabilit...

CVE-2025-14508

CVE-2025-14508 : MediaCommander for WordPress allows unauthorized data deletion via the REST API endpoint import-csv due to a missing capability check. The endpoint uses an upload_files (Author-level) check for a destructive operation, enabling authenticated users with Author-level access or high...