124801 matches found
CGA-8384-WRHH-974P
Bulletin has no description...
CGA-JM2H-RQX6-VGHH
Bulletin has no description...
CGA-GW79-7568-C5V2
Bulletin has no description...
Exploit for OS Command Injection in Php
CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab /...
CGA-CXV5-JG92-WXM7
Bulletin has no description...
CGA-WG4H-C24W-47WR
Bulletin has no description...
CGA-9CPQ-Q28M-HG38
Bulletin has no description...
CGA-74WH-6JQF-MFGM
Bulletin has no description...
CGA-R72R-3385-C6Q8
Bulletin has no description...
pickem vulnerable to terminal escape-sequence injection via unsanitized item text
Impact pickem rendered item text label, description, group, meta, name to the terminal with no control-character sanitization. chrome.row only stripped ANSI from the active row; inactive rows, the public createFormatter, and selection-summary lines printed labels raw, and the ANSI strip missed ba...
GHSA-8QX3-8GM5-9CJ2 pickem vulnerable to terminal escape-sequence injection via unsanitized item text
Impact pickem rendered item text label, description, group, meta, name to the terminal with no control-character sanitization. chrome.row only stripped ANSI from the active row; inactive rows, the public createFormatter, and selection-summary lines printed labels raw, and the ANSI strip missed ba...
CGA-CQ9X-2W7C-R4WV
Bulletin has no description...
openssl openssl-4.0.2
Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...
CGA-CV7X-C5WJ-7G3Q
Bulletin has no description...
GHSA-F5PJ-2738-996M mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist
mcp-shell at commit 17ac0eef5c9a5a42b8fb132d3d034973d55a5433 has two issues that together mean neither the default deploy path nor the recommended "secure mode" delivers the restriction they're marketed as providing. Filing these together because the two failure modes bracket the full intended...
mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist
mcp-shell at commit 17ac0eef5c9a5a42b8fb132d3d034973d55a5433 has two issues that together mean neither the default deploy path nor the recommended "secure mode" delivers the restriction they're marketed as providing. Filing these together because the two failure modes bracket the full intended...
binary-exploitation-writeups
Binary Exploitation Writeups A comprehensive collection of bi...
GHSA-3X77-WG38-92R3 mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
Summary mcp-shell ships a default Docker configuration security.yaml that includes /bin/bash in the allowedexecutables allowlist. The command validator security.go only checks whether the first token of the supplied command matches an allowed executable; it does not inspect or reject shell...
mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
Summary mcp-shell ships a default Docker configuration security.yaml that includes /bin/bash in the allowedexecutables allowlist. The command validator security.go only checks whether the first token of the supplied command matches an allowed executable; it does not inspect or reject shell...
mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias
Summary mcp-shell's "secure mode" is designed to restrict command execution to an allowlist of executables defined in security.yaml. The default configuration includes /usr/bin/git. The security validator in security.go blocks common shell metacharacters |&;$\ but omits !, which is the prefix Git...