CVE-2026-40176-poc

CVE-2026-40176: Composer Perforce OS-Befehlseinschleusung PoC English version Übersicht Dieses Repository enthält einen Proof of Concept PoC für die kritische OS-Befehlseinschleusungs-Schwachstelle CVE-2026-40176 , die im Perforce VCS-Treiber von Composer vorhanden ist. Die Schwachstelle betrifft...

CVE-2026-71243 backmeup (npm) - OS Command Injection via Backup Option Values

The backmeup npm package assembles shell command strings by directly concatenating its option values name, source, destination, filter - e.g. cmd = "mkdir -p " + path.joininfo.destination, info.name + "; " - and executes the resulting string through a shell via ssh2-exec locally via childprocess,...

CVE-2026-36044

@pensar/apex = 0.0.58 is vulnerable to OS command injection via the smartenumerate tool. The createSmartEnumerateTool function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js...

PT-2026-43702

@pensar/apex = 0.0.58 is vulnerable to OS command injection via the smart enumerate tool. The createSmartEnumerateTool function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js chi...