EUVD-2026-63741

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-63748

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-63619

Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...

EUVD-2026-63624

Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...

mboxshell v0.7.1

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

dns-benchmark-tool

⚠️ questo progetto è stato spostato e non è più mantenuto. installa il successore: pip install net-benchmark repository: https://github.com/net-benchmark/net-benchmark tutti i comandi e flag esistenti rimangono completamente compatibili. DNS Benchmark Tool Parte di BuildTools - Network Performance...

hermes

Hermes Hermes è un agente Linux leggero scritto in Python, progettato per Mythic 3.0 e successivi. Prende il nome da Hermes, messaggero degli dei — costruito per velocità e discrezione. Caratteristiche Supporto Linux Supporto proxy SOCKS5 per pivot e movimento laterale Profili C2 multipli: HTTP,...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always. Backup compression with hardware-adaptive codec selection, AES-256 authenticated encryption, post-quantum key encapsulation, and full-disk backup. Pure C11, zero dependencies, 13,00...

PT-2026-79344

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Apache InLong. Agent Installer's ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd with no filtering or whitelist validation. This issue affects Apache InLong: from 2.0.0 before...

PT-2026-79413

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, the shared shell-command parser in omnigent/policies/builtins/ shell.py fails to recognize combined interpreter flags, the timeout, nice, setsid, and stdbuf wrappers, command...

PT-2026-79343

Command Injection in BOSH CLI tool on windows in Cloud Foundry allows a remote attacker to execute arbitrary shell commands via command injection vulnerabilities...

PT-2026-79285

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

PT-2026-79412

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validate agent bundle does not reject a tools..callable dotted Python path...

PT-2026-79459

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http servers/linux mcp server.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An...

PT-2026-79411

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/session id/agent checks LEVEL EDIT permission for a session but does not reject a bound shared or template agent whose agent.session id is None. An authenticated user with...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102021 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has ...

PT-2026-79273

The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-55558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220...

UBUNTU-CVE-2026-63481

Hurl is a command line tool that runs and tests HTTP requests defined...

...[ More ]

Flowise versions from 2.2.7 prior to 3.1.2 are vulnerable to remote code execution through the Custom MCP Model Context Protocol node configuration. The vulnerability exists in the /api/v1/node-load-method/customMCP endpoint, which accepts arbitrary command and argument configurations for MCP...