Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2025/10/29 7:36 p.m.•30 views

CVE-2025-11202 win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability

win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.8CVSS0.02768EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/29 12:00 a.m.•1 views

CVE-2025-11202: Improper Neutralization of Special Elements used in an OS Command

win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.8CVSS6.7AI score0.02768EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/10/03 12:00 a.m.•19 views

win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the resolveCommandPath method. The issue results from the lack ...

9.8CVSS7.6AI score0.02768EPSS
SaveExploits0References1
Rows per page
Query Builder