Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

cve-2023-1671

Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack is a Perl script that calls /opt/ws/bin/sblistpack, which is another Perl script. The shell command arguments in it are enclosed in single quotes: $rc += system"$sblistpack '$uri' '$user'...

CVE-2023-46604

CVE-2023-46604 01. Apache ActiveMQ & OpenWire 1 Overview of Apache ActiveMQ and OpenWire ActiveMQ is an open-source messaging and integration pattern server that supports communication between systems using various languages, not just Java, as well as a broker including clients that support JMS...

[SECURITY] [DLA 4901-1] node-shell-quote security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4901-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley November 12, 2026 https://wiki.debian.org/LTS -...

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...

CVE-2024-4358

CVE-2024-4358 An Vulnerability detection and Mass Exploitation tool for CVE-2024-4358 Installation: git clone https://github.com/RevoltSecurities/CVE-2024-4358 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / / / | |// // / / / / / / / / / / / /...

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...

Malicious code in qzc690382 (PyPI)

Source: amazon-inspector b34d702840be6773d3d41444f836f45dab6a8e3524fcc8e4cd6d224ac3a77f1e The package body is inert init.py contains only c\n; the entire functionality lives in setup.py, which runs on pip install. During install, setup.py writes a Python HTTP server script to /tmp/.kxs and launch...

CVE-2026-76826

The tsParticles TypeScript library (versions 4.0.0 through 4.3.2 ) is vulnerable to OS Command Injection (CWE-78) within its stable publish workflow. The vulnerability occurs because the workflow interpolates steps.release.outputs.body directly into a Bash echo command when generating RAW_RELEASE...

CVE-2026-44266

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping , so Ruby interpolation forms in the string-literal emitter or the labelled subtype-constraint...

CVE-2026-44266

The Elo expression language (versions prior to 1.0.1 ) contains a vulnerability in its Ruby backend (src/compilers/ruby.ts). The issue arises because attacker-controlled text is embedded into Ruby double-quoted strings without escaping the # character. This allows Ruby interpolation forms in the ...

CVE-2026-44266 Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping , so Ruby interpolation forms in the string-literal emitter or the labelled subtype-constraint...

CVE-2026-44266: enspirit elo: Elo is a purely functional expression language for no-code tools

Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, the Ruby backend in src/compilers/ruby.ts embeds attacker-controlled text in Ruby double-quoted strings without escaping , so Ruby interpolation forms in the string-literal emitter or the labelled subtype-constraint...

CVE-2026-118905

Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.31.2 through 0.40.5, "nvmls" filters installed versions with a sed program that embeds the requested version pattern in a "..." address, escaping "." and, since 0.40.4, "" but not...

ATXP command injection vulnerability

Versions 1.0.0 and earlier of ATXP contain a command injection vulnerability. This flaw arises because the runAtxp function fails to sanitize parameters passed to the MCP tool. Attackers can exploit this by replacing $ or backticks within email or SMS content, thereby injecting values into...

PT-2026-126420

Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue in src/utils.ts fails to neutralize backticks, $ substitution, and other shell metacharacters,...

Kevin Poorman Salesforce CLI MCP Server command injection vulnerability

Kevin Poorman: The Salesforce CLI MCP Server versions 1.3.2 and earlier contain a command injection vulnerability. This vulnerability arises because escapeValue fails to neutralize backticks, $, and other shell metacharacters, allowing attackers to supply specially crafted flags for the Salesforc...

CVE-2026-114107

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

EUVD-2026-106910

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

EUVD-2026-102604

Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete...