26482 matches found
Ridvay Code 安全漏洞
Ridvay Code is an artificial intelligence code assistant provided by Ridvay Code Inc. There is a security vulnerability in Ridvay Code, which stems from OS command injection, potentially leading to remote code execution...
PT-2026-29146
Name of the Vulnerable Software and Affected Versions baserCMS versions prior to 5.2.3 Description baserCMS contains an OS command injection flaw in its core update functionality. An authenticated administrator can execute arbitrary OS commands on the server because user-controlled input is passe...
baserCMS 操作系统命令注入漏洞
BaserCMS is a corporate-level content management system CMS developed by the BaserCMS team. Versions of BaserCMS prior to 5.2.3 had a vulnerability related to operating system command injection. This vulnerability stemmed from features that allowed for OS command injections, potentially enabling...
CVE-2026-30311
Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations...
Apple macOS Denial of Service Vulnerability (CNVD-2026-19032)
Apple macOS is a specialized operating system developed by Apple for Mac computers. A denial of service vulnerability exists in Apple macOS, which can be exploited by an attacker to cause an application to cause an unexpected system termination...
Linux Distros Unpatched Vulnerability : CVE-2025-66038
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sccompacttlvfindtag searches a compact-TLV buffer for a given tag. In...
PT-2026-33149
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description An uninitialized use in the Accessibility component of Google Chrome on Windows allows a remote attacker who has already compromised the renderer process to potentially perform a sandb...
CVE-2026-5125 raine consult-llm-mcp server.ts child_process.execSync os command injection
A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function childprocess.execSync of the file src/server.ts. The manipulation of the argument gitdiff.baseref/gitdiff.files results in os command injection. The attack is only possible with local...
New macOS security feature will alert users about possible ClickFix attacks
Rumor has it that Apple deployed a new security feature in the fight against ClickFix. The new feature will be available for macOS Tahoe 26.4 and it will warn Mac users if they paste certain commands into the Terminal app that might be harmful. If such a command is pasted, macOS will warn the use...
Cline 安全漏洞
Cline is an AI programming assistant that serves as an integrated CLI and editor for necboy developers. Cline has a security vulnerability, which stems from a vulnerability in the command autentication module—specifically, an OS command injection vulnerability—potentially allowing remote code...
CVE-2026-30307
Summary: CVE-2026-30307 affects Roo Code’s command auto-approval module. The vulnerability stems from parsing command structures with fragile regular expressions that do not account for Shell command substitution (e.g., $(...) and backticks). An attacker can craft a command like: git log --grep="...
consult-llm-mcp 操作系统命令注入漏洞
consult-llm-mcp is a multi-model code consultation server developed by Raine Virta. Versions of consult-llm-mcp prior to 2.5.3 had an operating system command injection vulnerability. This vulnerability stemmed from incorrect operations with parameters gitdiff.baseref/gitdiff.files in the...
Apple Security Advisory 03-24-2026-2
Apple Security Advisory 03-24-2026-2 - iOS 18.7.7 and iPadOS 18.7.7 addresses bypass, null pointer, out of bounds access, and use-after-free vulnerabilities...
The vulnerability of the Internet Key Exchange Version 2 (IKEv2) function in Cisco IOS operating systems, as well as in the Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) network devices, allows attackers to induce service interruptions.
The vulnerability of the Internet Key Exchange Version 2 IKEv2 function in Cisco IOS operating systems, as well as in the Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD devices, is related to a memory leak error during the processing of incoming IKEv2 packets...
PT-2026-29100
Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective. The system relies on fragile regular expressions to parse command structures; while it attempts to intercept dangerous operations, i...
The vulnerability of the panthor_sched_unplug() function in the drivers/gpu/drm/panthor/panthor_sched.c file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the panthorschedunplug function in the drivers/gpu/drm/panthor/panthorsched.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the use of memory after deallocation. Exploiting this...
ROOT-OS-ALPINE-318-CVE-2023-49285 CVE-2023-49285 in rootio-squid - Patched by Root
Root has patched CVE-2023-49285 in the rootio-squid package for Root:Alpine:3.18. Multiple fixed versions available...
Codebase MCP 操作系统命令注入漏洞
Codebase MCP is a code library retrieval and analysis tool developed by DeDeveloper23. Codebase MCP has a vulnerability related to operating system command injection. This vulnerability stems from a function in the Component RepoMix Command Handler called getCodebase/getRemoteCodebase/saveCodebas...
CVE-2026-5012 elecV2 elecV2P rpc pm2run os command injection
A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem ear...
