416441 matches found
CVE-2026-91048
The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard SecuredSessionFactoryImpl treats a command with no matching ACL rule as allowed, so any authenticated shell session including one holding only the viewer role could run...
CVE-2026-91012 Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation
org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...
CVE-2026-91012
A path traversal vulnerability exists in Apache Karaf within the org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, properties) method, which supports the config MBean and config: oo shell commands. The root cause is the lack of validation to ensure that caller-supplied input stay...
CVE-2026-91012
org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...
CVE-2026-91012 Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation
org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...
CVE-2026-91012 Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation
org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...
EUVD-2026-88660
org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...
Exploit for CVE-2026-94545
CVE-2026-94545 Next.js next/og Unauthenticated RCE ★ CVE-2026...
Security Bulletin: Vulnerabilities addressed in IBM Watson OpenScale
Summary Multiple vulnerabilities have been identified in IBM Watson OpenScale. The vulnerabilities affect the versions listed in the Affected Products and Versions section and have been addressed in the corresponding versions. Refer to the Vulnerability Details and Remediation/Fixes sections for...
Security Bulletin: Multiple vulnerabilities addressed in IBM watsonx.governance, IBM AI Factsheets, and IBM Watson OpenScale
Summary Multiple vulnerabilities have been identified in IBM watsonx.governance, IBM AI Factsheets, and IBM Watson OpenScale. The vulnerabilities affect the versions listed in the Affected Products and Versions section and have been addressed. Refer to the Vulnerability Details and...
Security update for perl-DBI
This update for perl-DBI fixes the following issue: CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
Anjvision YSSD-RTMP-H5
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the...
VIVOTEK Camera Firmware
ADVISORY SUMMARY Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...
Exploit for OS Command Injection in Kestra
CVE-2026-49869: Kestra Unauthenticated Remote Code Execution...
Command Injection
Overview org.webjars.npm:shell-quote is a package used to quote and parse shell commands. Affected versions of this package are vulnerable to Command Injection via the quote function when a comment token is followed by a string token containing a line terminator. A comment token emits a -prefixed...
Command Injection
Overview shell-quote is a package used to quote and parse shell commands. Affected versions of this package are vulnerable to Command Injection via the quote function when a comment token is followed by a string token containing a line terminator. A comment token emits a -prefixed string that...
Multiple vulnerabilities in BUFFALO Wi-Fi Products
Overview The web configuration user interfaces of Wi-Fi products provided by BUFFALO INC. contain multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2026-86530 Stack-based buffer overflow CWE-121 - CVE-2026-95104 Veeti Punnonen reported these vulnerabilities to JPCERT/CC...
Cyber-Defenders-lab-
CyberDefenders Blue Team Labs My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Each lab is a real network forensics investigation — starting from a PCAP file and ending with a full reconstruction of the attack. 📄 Full combined PDF report — includes every lab write-up,...
CVE-2026-102422 shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token
shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...
CVE-2026-102422 shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token
shell-quote's quote function emits a comment token as followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token. A line terminator \n, \r, U+2028, U+2029 in that later string therefore ends the comment, and the rest of the string is...