PYSEC-2026-4219 GPT Researcher MCP STDIO configuration allows remote command execution

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...

GPT Researcher MCP STDIO configuration allows remote command execution

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...

vBulletin 5.0.0-5.5.4 - Remote Command Execution

vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...

Oracle WebLogic Server - Remote Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent - WLS Security is susceptible to remote command execution. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. This easily exploitable vulnerability allows unauthenticated attacke...

PT-2026-115109

Name of the Vulnerable Software and Affected Versions Tianji versions prior to 1.31.29 Description The formatString function in src/server/utils/template.ts passes survey feedTemplate and monitor notification templates to the lodash template function while the default evaluate pattern is enabled....

Splunk Enterprise 10.4.2 Patroni REST API Remote Command Execution

Splunk Enterprise versions 10.2.0 through 10.2.6 and 10.4.0 through 10.4.2 contain a missing authentication flaw in the Patroni REST API that permits unauthenticated network users to execute operating-system commands on search head cluster members. https://packetstorm.news/download/235638...

Security Advisory Ivanti Connect Secure (CVE-2026-104935)

Update 13 Oct: Volexity Blog Post included in FAQ Summary Ivanti has released updates for Ivanti Connect Secure ICS which addresses one high severity vulnerability. Successful exploitation could allow a remote unauthenticated attacker to execute arbitrary commands. We are aware of exploitation in...

Apache Struts 2 - Remote Command Execution

Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...

CVE-2022-1388-POC

CVE-2022-1388 Poc by PsychoSec Improved POC for CVE-2022-1388 that affects multiple F5 products. This is an improved version of Horizon3's Proof of Concept for CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 This version contains multiple improvements as well as an interactive shell to...

CVE-2026-108549

The software cc-connect through version 1.5.0 is vulnerable to a missing authentication flaw in the MAX platform adapter webhook mode (specifically in platform/max/max.go). If no webhook_secret is configured, the application accepts unauthenticated updates. A remote attacker capable of reaching t...

PT-2026-109664

Name of the Vulnerable Software and Affected Versions cc-connect versions prior to 1.5.1 Description The MAX platform adapter webhook mode in platform/max/max.go fails to require authentication when no webhook secret is configured. Remote attackers can access the webhook listener on port 8080 and...

SpotWeb command injection vulnerability

Versions of spotweb 1.5.8 and earlier have a command injection vulnerability. This vulnerability stems from OS command injection in the runcommand NZB processor. Attackers can exploit this vulnerability by issuing a spot with a malicious title, replacing the shell metacharacter without escaping i...

EUVD-2026-95331

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

Apache APISIX 2.11.0 Default Admin Token Remote Command Execution

Apache APISIX version 2.11.0 uses a default administrative API token that permits route creation. A route script can execute commands, resulting in remote command execution. https://packetstorm.news/download/235028...

GitLab Community Edition 13.10.1 Remote Command Execution

GitLab Community Edition version 13.10.1 allows unauthenticated remote command execution when a crafted image is processed by ExifTool's DjVu parser. https://packetstorm.news/download/235014...

Apache Solr 7.0.1 RunExecutableListener Remote Command Execution

Apache Solr version 7.0.1 contains a flaw where an unauthenticated Config API request can add a RunExecutableListener that executes a command when a core update is committed. The supplied proof of concept provides a containerized vulnerable lab and HTTP request sequence...

Spring Security OAuth 2.0.8 Remote Command Execution

Spring Security OAuth version 2.0.8 allows authenticated remote command execution when its whitelabel error view evaluates a malicious responsetype parameter as a Spring Expression Language expression. Included proof of concept generates the expression. https://packetstorm.news/download/234976...

Webmin 1.920 Pre-Authentication Remote Command Execution

Webmin versions through 1.920 contain a pre-authentication command injection vulnerability in passwordchange.cgi. The supplied proof of concept details a request that executes commands through the old parameter. https://packetstorm.news/download/234964...

Supervisord 3.3.2 XML-RPC Remote Command Execution

Supervisord version 3.3.2 contains an XML-RPC method-resolution flaw that allows remote command execution through crafted requests. The included proof of concept executes a supplied command and retrieves its output from the Supervisord log. https://packetstorm.news/download/234970...

Splunk Enterprise 10.2.0 < 10.2.7, 10.4.0 < 10.4.3 (SVD-2026-1001)

The version of Splunk Enterprise installed on the remote host is 10.2.x prior to 10.2.7 or 10.4.x prior to 10.4.3. Splunk Enterprise 9.4.x and 10.0.x are not affected. It is, therefore, affected by a missing authentication vulnerability as referenced in the SVD-2026-1001 advisory. An...