13 matches found
The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to compromise the system.
The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...
Malicious code in ams-ssk (npm)
Malicious npm package published by user shetty123 as part of a Telegram account hijacking framework targeting Indian Telegram users. All 31 published versions 1.0.0 through 1.0.33 are malicious. Pairs with common-tg-service, which performs the client-side Telegram account takeover. ams-ssk is the...
CVE-2026-6130
A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server Management System. Executing a manipulation of the argument args/env can lead to os command...
CVE-2026-6130
A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server Management System. Executing a manipulation of the argument args/env can lead to os command...
CVE-2026-6130 chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection
A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server Management System. Executing a manipulation of the argument args/env can lead to os command...
CVE-2026-6130
CVE-2026-6130 affects chatboxai up to version 1.20.0, impacting the StdioClientTransport function in src/main/mcp/ipc-stdio-transport.ts within the Model Context Protocol Server Management System. The root cause is a flaw where manipulating the argument list (args/env) enables os command injectio...
CVE-2026-6130: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server Management System. Executing a manipulation of the argument args/env can lead to os command...
EUVD-1999-0436
Malware in sbrugna...
Unauthorized Access Vulnerability in Server Management System of Shanghai Sailian Information Technology Co.
Shanghai Sailian Information Technology Co. was founded on December 19, 2016 . The company's business scope includes: licensed items: type II value-added telecommunication business, etc. An unauthorized access vulnerability exists in the server management system of Shanghai Sailian Information...
File upload vulnerability in QCMS web management system ca***.php
QCMS website management system is a PHP lightweight system developed through MVC architecture. A file upload vulnerability exists in the QCMS website management system ca.php, which can be exploited by an attacker to gain control of the web server...
CVE-1999-0436
Domain Enterprise Server Management System DESMS in HP-UX allows local users to gain privileges...