42824 matches found
PT-2026-111826
Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision that allows attackers to auto-approve denied shell commands by prefixing them with a bare & redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo...
CVE-2026-110206: Interpretation Conflict
Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...
WordPress Bricksforge 3.1.8.9 Shell Upload
WordPress Bricksforge plugin versions through 3.1.8.9 contain an unauthenticated arbitrary file upload vulnerability in temporaryFileUploads that can permit PHP code execution. https://packetstorm.news/download/235378...
VulnCheck KEV: CVE-2026-96951
Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
Apache Struts 2 6.3.0.2 Path Traversal / Shell Upload
Apache Struts 2 version 6.3.0.2 contains a path traversal flaw in the legacy file upload interceptor that permits JSP shell upload outside the intended upload directory. This proof of concept demonstrates remote code execution. https://packetstorm.news/download/235382...
WordPress Bricksforge 3.1.8.9 Shell Upload
WordPress Bricksforge plugin versions 3.1.8.9 and prior contain an unauthenticated arbitrary file upload vulnerability through manipulated temporary upload metadata. The included proof of concept uses an inert GIF canary to validate the arbitrary file-write condition...
Maian Pal 2.1 Product Image Shell Upload
Maian Pal version 2.1 contains an authenticated unrestricted product image upload that allows an administrator to upload and execute a PHP shell. Included is a proof of concept. https://packetstorm.news/download/235396...
CVE-2026-83782: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
CVE-2026-85936: Double Free
Double free in Windows Shell allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83782: Windows Shell Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83905: Windows Shell Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83873: Windows Shell Elevation of Privilege Vulnerability
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-112315
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue exists in Windows Shell. This flaw allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...
CVE-2026-96951: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
Microsoft Windows: CVE-2026-85936: Windows Shell Remote Code Execution Vulnerability
Double free in Windows Shell allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-83906: Incorrect Implementation of Authentication Algorithm
Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70222: Relative Path Traversal
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...