CVE-2026-82026 Radar < 1.12.2 Missing Authorization via /api/local-terminal

Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint /api/local-terminal that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check instead of role-based access control...

CVE-2026-55601

A flaw was found in MultiTail. When using the execute-on-match feature, MultiTail fails to properly sanitize matched log data before passing it to the system shell for command execution. An attacker capable of influencing the contents of monitored input can exploit this issue by injecting shell...

Update Windows: Record Patch Tuesday fixes flaw already under attack

Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Just when you thought a previous record would stand for a while, Microsoft comes out again with the largest...

ROOT-APP-NPM-CVE-2026-102422 CVE-2026-102422 in shell-quote - Patched by Root

Root has patched CVE-2026-102422 in the shell-quote package for Root:npm. Multiple fixed versions available...

BOF-classic-Exploit-Calamity-RootScript

Calamity-RootScript Python exploit for HTB Calamity's "goodlu...

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL...

PT-2026-114089

Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted names. The convertDocxToHtml function in src/converter.ts invokes pandoc through execa with shell:true, so shell metacharacters in the --doc...

PT-2026-114293

Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint /api/local-terminal that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check instead of role-based access control...

ModelScope MS-Agent 1.5.1 < 1.6.0 Command Injection (CVE-2026-2256)

The version of ModelScope MS-Agent installed on the remote host is 1.5.1 or later but prior to 1.6.0. It is, therefore, affected by a command injection vulnerability. The Shell tool runs commands on the host through a shell, guarded only by a regex denylist that can be bypassed, allowing an...

Debian dsa-6561 : sogo - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6561 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6561-1 [email protected] https://www.debian.org/security/ Moritz...

PT-2026-114084

Name of the Vulnerable Software and Affected Versions xhtml2pdf versions prior to 0.2.19 Description An OS command injection issue exists in the pisa.startViewer function. This occurs when unescaped file names are interpolated into os.system, allowing attackers to execute arbitrary commands as th...

Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130108 advisory. A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and...

PT-2026-114218

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.8.6 Description The pre-installation endpoint "web/instalador/instalador.php" is accessible before the config.php file is created and processes unauthenticated POST data. During the Linux reinstall process, a speciall...

Moderate: environment-modules security update

The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "modul...

Joern 4.0.655

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-114078

Name of the Vulnerable Software and Affected Versions pypdftk versions prior to 0.6 Description An OS command injection issue exists in the fill form, dump data fields, and pdftk cmd util functions. The software constructs shell commands using paths provided by the caller. An attacker who can...

CVE-2026-105106: Improper Neutralization of Special Elements used in an OS Command

Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::removeatjob without validating it. Schedule::At::remove substitutes the supplied job ID into an atrm...

CVE-2026-110635: Improper Neutralization of Special Elements used in an OS Command

webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell...

PT-2026-114077

webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell...

CVE-2026-110642: Improper Neutralization of Special Elements used in an OS Command

xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS...