Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/05/12 8:21 p.m.7 views

CVE-2026-31246

GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 2025-09-03 contains a command injection vulnerability CWE-78 in the Executor.run method. During project execution, when the system prompts the user to confirm or modify a command to be run, it accepts free-text input without proper...

6.5CVSS6.5AI score0.00973EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2026/05/11 6:31 p.m.6 views

GPT-Pilot contains a command injection vulnerability in the Executor.run() method

GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 2025-09-03 contains a command injection vulnerability CWE-78 in the Executor.run method. During project execution, when the system prompts the user to confirm or modify a command to be run, it accepts free-text input without proper...

6.5CVSS6.5AI score0.00973EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2026/05/11 4:17 p.m.6 views

CVE-2026-31246

GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 2025-09-03 contains a command injection vulnerability CWE-78 in the Executor.run method. During project execution, when the system prompts the user to confirm or modify a command to be run, it accepts free-text input without proper...

6.5CVSS0.00973EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-14536

Malware in sbrugna...

9.8CVSS9.2AI score0.01915EPSS
Exploits0References17
SUSE CVE
SUSE CVE
added 2023/07/25 2:18 a.m.2 views

SUSE CVE-2023-38057

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

5.4CVSS6.4AI score0.00469EPSS
Exploits0References3
OSV
OSV
added 2023/07/24 9:15 a.m.1 views

UBUNTU-CVE-2023-38057

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects...

5.4CVSS5.3AI score0.00469EPSS
Exploits0References2
OSV
OSV
added 2021/04/06 5:20 p.m.14 views

GHSA-4HJQ-422Q-4VPX Mautic vulnerable to secret data exfiltration via symfony parameters

Impact Symfony parameters which is what Mautic transforms configuration parameters into can be used within other Symfony parameters by design. However, this also means that an admin who is normally not privy to certain parameters, such as database credentials, could expose them by leveraging any ...

5.8CVSS5.1AI score0.00109EPSS
Exploits1References4
Veracode
Veracode
added 2021/03/24 2:37 a.m.14 views

Information Disclosure

mautic/core is vulnerable to information disclosure. The vulnerability exists due to configurations allowing other Symfony parameters to be exposed publicly in the free text fields...

5.8CVSS2.6AI score0.00109EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/03/23 12:0 a.m.1 views

Mautic 注入漏洞

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails, and manages customer resources. Mautic 3.3.2 suffers from an injection vulnerability that allows an authorized administrator user to expose confidential parameters by leveraging Symfo...

5.8CVSS5.4AI score0.00109EPSS
Exploits1References2
OSV
OSV
added 2018/07/31 8:29 p.m.2 views

CVE-2018-14297

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.1AI score
Exploits0References2
hackapp
hackapp
added 2017/07/10 5:24 a.m.10278 views

TextNow - free text + calls - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TextNow - free text + calls published at the 'play' market has multiple vulnerabilities...

1.2AI score
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/10/16 12:0 a.m.39 views

FreeBSD : mozilla -- multiple vulnerabilities (9c1495ac-8d8c-4789-a0f3-8ca6b476619c)

The Mozilla Project reports : MFSA 2014-74 Miscellaneous memory safety hazards rv:33.0 / rv:31.2 MFSA 2014-75 Buffer overflow during CSS manipulation MFSA 2014-76 Web Audio memory corruption issues with custom waveforms MFSA 2014-78 Further uninitialized memory use during GIF MFSA 2014-79...

7.5CVSS9AI score0.04667EPSS
Exploits1References21
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

fttss <= 2.0 - Remote Command Execution Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl fttss = 2.0 Remote Command Execution Vulnerability Script: A Free Text-To-Speech System Script site:...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2009/01/12 12:0 a.m.13 views

fttss 2.0 Command Execution

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl fttss /tmp/dupa; HTTP/1.x 200 OK Date: Sun, 11 Jan 2009 16:24:57 GMT Server: Apache X-Powered-By: PHP/5.2.8-pl1-gentoo...

0.1AI score
Exploits0
exploitpack
exploitpack
added 2009/01/11 12:0 a.m.9 views

fttss 2.0 - Remote Command Execution

fttss 2.0 - Remote Command Execution :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl fttss /tmp/dupa; HTTP/1.x 200 OK Date: Sun, 11 Jan 2009 16:24:57 GMT Server: Apache...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2009/01/11 12:0 a.m.29 views

fttss 2.0 - Remote Command Execution

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl fttss /tmp/dupa; HTTP/1.x 200 OK Date: Sun, 11 Jan 2009 16:24:57 GMT Server: Apache X-Powered-By: PHP/5.2.8-pl1-gentoo...

7.4AI score
Exploits0
Rows per page
Query Builder