303827 matches found
Command Injection
Overview monai is an AI Toolkit for Healthcare Imaging Affected versions of this package are vulnerable to Command Injection via the datasetnameorid parameter in monai/apps/nnunet/nnunetv2runner.py. When constructing shell commands for nnUNet training, the runner incorporates the user-supplied...
hoaxshell
hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...
CVE-2026-59915
Dell Alienware Command Center AWCC, versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-49500
Dell Alienware Command Center AWCC, versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service and Elevation of Privilege...
CVE-2026-54543
In Froxlor before 2.3.8, an authenticated customer with DNS-zone permissions can inject crafted record or type field values (line delimiters, tabs, semicolons) into lib/Froxlor/Api/Commands/DomainZones.php, which DnsEntry.php serializes into a BIND zone file, creating extra resource-record lines ...
EUVD-2026-61217
Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...
CVE-2026-54543 Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields
Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...
CVE-2026-54543 Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields
Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...
CVE-2026-54543 Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields
Froxlor is open source server administration software. Prior to 2.3.8, the DomainZones.add API command in lib/Froxlor/Api/Commands/DomainZones.php accepts user-controlled record and type values without rejecting line delimiters, tab characters, semicolons, or unsupported DNS record types before...
Exploit for Code Injection in Anyscale Ray
CVE-2025-62593 — Ray Remote Code Execution unauthenticated...
GHSA-7PWQ-Q9JF-539H kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)
Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully escaping the sandbox. Details A host embeds bound "Service" objects that guest scripts call across the wasm boundary through the transport dispatcher. The dispatcher passed the...
kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)
Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully escaping the sandbox. Details A host embeds bound "Service" objects that guest scripts call across the wasm boundary through the transport dispatcher. The dispatcher passed the...
CVE-2026-59915
Dell Alienware Command Center AWCC, versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-59915
Dell Alienware Command Center versions prior to 6.14.20.0 have a Least Privilege Violation flaw allowing a low-privilege local attacker to escalate privileges. Dell published advisory DSA-2026-334 recommending an update to 6.14.20.0. No exploit or in-the-wild exploitation details are provided in ...
EUVD-2026-61206
Dell Alienware Command Center AWCC, versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
hotpot
Hotpot 🍲 Authy / Google Authenticator for the command line. Hotpot is a simple and secure command-line tool for managing TOTP-based two-factor authentication codes. Hotpot securely stores your 2FA secrets in your system's keyring and generates time-based one-time passwords when you need them. Bui...
CVE-2026-49500
Dell Alienware Command Center AWCC, versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service and Elevation of Privilege...
CVE-2026-49500
Dell Alienware Command Center versions prior to 6.14.20.0 have a link-following flaw exploitable by a low-privileged local attacker, enabling DoS and privilege escalation (CVSS 6.0, MEDIUM). No in-the-wild exploitation reported; update to 6.14.20.0 to remediate. Dell DSA-2026-334 advisory availab...
EUVD-2026-61204
Dell Alienware Command Center AWCC, versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service and Elevation of Privilege...
MAL-2026-14131 Malicious code in infogram-bot (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08547edeec8e522d84b40fd8236878da54c888ede86588be3913a1c37cd2b245 [email protected] implements a Telegram bot that accepts text messages from remote parties and passes them directly to subprocess.checkoutputcmd,...