292 matches found
CVE-2025-13120 mruby array.c sort_cmp use after free
A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...
CVE-2025-11445
Kilo Code up to 4.86.0 is affected by an injection vulnerability in the ClineProvider function of src/core/webview/ClineProvider.ts within the Prompt Handler component. The issue allows remote manipulation and has publicly disclosed exploits; remediation is to apply the patch. The available docum...
Desktop Commander MCP 操作系统命令注入漏洞
Desktop Commander MCP is an MCP server by the individual developer Eduard Ruzga. An operating system command injection vulnerability exists in Desktop Commander MCP version 0.2.13 and earlier, which stems from improper manipulation of the function CommandManager in the file src/command-manager.ts...
PT-2025-41300
Name of the Vulnerable Software and Affected Versions wonderwhy-er DesktopCommanderMCP versions up to 0.2.13 Description A flaw exists within the software that allows for operating system command injection. This occurs due to improper handling of commands within the extractBaseCommand function...
EUVD-2019-0282
Malware in sbrugna...
EUVD-2018-12932
Malware in sbrugna...
EUVD-2019-9394
Malware in sbrugna...
EUVD-2021-10890
Malware in sbrugna...
EUVD-2017-2746
Malware in sbrugna...
EUVD-2021-33195
Malicious code in bioql PyPI...
EUVD-2022-15522
Malicious code in bioql PyPI...
EUVD-2025-28823
Malicious code in bioql PyPI...
EUVD-2022-37985
Malicious code in bioql PyPI...
EUVD-2024-21623
Malicious code in bioql PyPI...
EUVD-2021-32036
Malicious code in bioql PyPI...
EUVD-2025-25860
Malicious code in bioql PyPI...
MAL-2025-191739 Malicious code in giteegit (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4a26c5d911f4394086eca9dfca0dfb8b05cc0675bac36dfdbec08e30f6d1abed Package exfiltrates source code files to a telegram channel, while the description promises saving them to a git service --- Category: MALICIOUS - The campaign...
Linux Distros Unpatched Vulnerability : CVE-2019-19720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file. CVE-2019-19720 Note that Nessus relies on the...
CVE-2025-9176
A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...
CVE-2025-9176 neurobin shc Environment Variable shc.c make os command injection
A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the...