PT-2026-59114

Discovered through manual source code review. Verified by PoC execution against a local dbt-mcp v1.15.1 installation. Summary run dbt command in src/dbt mcp/dbt cli/tools.py constructs the dbt subprocess argument list by appending user-supplied MCP tool parameters without sanitization. Two...

EUVD-2015-2126

Malware in sbrugna...

Unspecified vulnerability in Weidmueller Industrial WLAN devices

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A security vulnerability exists in Weidmueller Industrial WLAN devices, which can be exploited by an attacker to cause an escape from a restricted console via a specially crafted menu selection string, resulting ...

CVE-2021-33528: Improper Adherence to Coding Standards

In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iwconsole functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker...

CVE-2019-5136

An exploitable privilege escalation vulnerability exists in the iwconsole functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send command...

CVE-2015-2013

IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service channel-agent abend and process outage via a crafted selection string in an MQI call...

Code injection

IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service channel-agent abend and process outage via a crafted selection string in an MQI call...

PT-2015-5545

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 7.0.1 before 7.0.1.13 Description The issue allows remote attackers to cause a denial of service, resulting in a channel-agent abend and process outage. This can be achieved by sending a crafted selection string in an...

CVE-2015-2013: Undefined Security Weakness

IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service channel-agent abend and process outage via a crafted selection string in an MQI call...