Remote Code Execution (RCE)

n8n is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient isolation in the Pyodide-based Python Code Node, which allows an authenticated attacker with workflow modification privileges to escape the sandbox and execute arbitrary commands on the host system running n8...

PT-2025-53605

Name of the Vulnerable Software and Affected Versions n8n versions 1.0.0 through less than 2.0.0 Description n8n is an open source workflow automation platform. A sandbox bypass vulnerability exists in the Python Code Node that uses Pyodide, affecting versions from 1.0.0 up to, but not including,...

CVE-2025-66237

DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the database, escalate privileges on the platform or execute system commands on the host...

NewStart CGSL MAIN 7.02 : sudo Multiple Vulnerabilities (NS-SA-2025-0246)

The remote NewStart CGSL host, running version MAIN 7.02, has sudo packages installed that are affected by multiple vulnerabilities: - Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user- controlled directory is used with the --chroot option...

EUVD-2017-3839

Malware in sbrugna...

CVE-2025-29366

In mupen64plus v2.6.0 there is an array overflow vulnerability in the writerdramregs and writerdramregs functions, which enables executing arbitrary commands on the host machine...

CVE-2025-29366

CVE-2025-29366 affects mupen64plus v2.6.0, where an array overflow in write_rdram_regs/read_rdram_regs can lead to arbitrary code execution on the host. Publicly disclosed references indicate the vulnerability resides in the RDRAM handling code (rdram.c/h) and related write_rdram_regs paths. The ...

CVE-2025-29366

In mupen64plus v2.6.0 there is an array overflow vulnerability in the writerdramregs and writerdramregs functions, which enables executing arbitrary commands on the host machine...

CVE-2025-29366

In mupen64plus v2.6.0 there is an array overflow vulnerability in the writerdramregs and writerdramregs functions, which enables executing arbitrary commands on the host machine...

CVE-2023-53059

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecchardev: fix kernel data leak from ioctl It is possible to peep kernel page's data by providing larger insize in struct croseccommand1 when invoking EC host commands. Fix it by using zeroed memory. 1:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm: Pause TCM when the firmware is stopped Not doing so will cause us to send a host command to the transport while the firmware is inactive, which will trigger a WARNING. bad state = 0 WARNING: CPU: 2 PID: 17434 ...

PT-2025-34376 · Unknown +1 · Mupen64Plus +1

Name of the Vulnerable Software and Affected Versions: mupen64plus version 2.6.0 Description: An array overflow issue exists in the write rdram regs and write rdram regs functions, potentially allowing for the execution of arbitrary commands on the host machine. Recommendations: At the moment,...

PT-2024-34900 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: An authenticated remote code execution issue in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on t...

PrivateGPT 操作系统命令注入漏洞

PrivateGPT is an AI project open-sourced by Zylon. An operating system command injection vulnerability exists in PrivateGPT version 0.3.0 and earlier, which stems from the presence of a Python command injection vulnerability that could allow an attacker to execute arbitrary commands on the system...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not suspending TCM when the firmware is stopped, resulting in sending host commands to the stopped firmware...

localai 操作系统命令注入漏洞

LocalAI is a free, open source alternative to OpenAI from the individual developer Ettore Di Giacinto. localai suffers from an operating system command injection vulnerability that stems from failure to clean up a user-supplied filename before passing it to ffmpeg via a shell command, allowing an...

SUSE CVE-2023-31414

Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute JavaScript code. This could lead to the attacker executing arbitrary commands on the host syste...

Gipsy 操作系统命令注入漏洞

Gipsy is a modular, free, open source Discord robot from Curiosity Open Source. An operating system command injection vulnerability exists in Gipsy versions prior to 1.3. An attacker exploiting this vulnerability could use sudoer privileges to run commands on the host...

CVE-2021-41619

An issue was discovered in Gradle Enterprise before 2021.1.2. There is potential remote code execution via the application startup configuration. The installation configuration user interface available to administrators allows specifying arbitrary Java Virtual Machine startup options. Some of the...

CVE-2021-39144

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...