CVE-2026-58474 whichllm < 0.5.16 Code Injection via run and snippet commands

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The...

CVE-2026-58474

whichllm before version 0.5.16 contains a code injection vulnerability in the run and snippet commands. The script generation function in cli.py interpolates HuggingFace-derived values—including GGUF variant filenames from the Hub API siblings rfilename field—directly into Python source code with...

Text4shell--Automated-exploit---CVE-2022-42889

Maven installieren - maven-linux //Für automatisiertes Hacken: 1../install.sh root@kitploit: 2../exploit.sh 3. Um die Anwendung zu entfernen, verwenden Sie ./stopapp.sh //Für manuelles Hacken: 1. Maven-Installation zum Erstellen des Fat-Jars root@kitploit: mvn clean install 2. Docker-Build...

CVE-2022-42889-text4shell

CVE-2022-42889 alias text4shell PoC per la vulnerabilità scoperta di recente in Apache Commons Text di @pwntester: La vulnerabilità risiede nell'oggetto interpolatore StringSubstitutor. Un interpolatore viene creato dal metodo StringSubstitutor.createInterpolator e consente ricerche di stringhe...

CVE-2022-42889-POC

CVE-2022-42889-POC Eine einfache Demo-Anwendung, die zeigt, wie die Sicherheitslücke CVE-2022-42889 ausgenutzt werden kann. Nutzt OOB Out of Band-Dienste, um die Präfixe dns und url zu demonstrieren. JavaDocs für commons-text interpolation commons-text JavaDocs Beispiel-Interpolationen...

riskootext4shell

riskootext4shell text4shell script for text coomons =1.10 CVE-2022-33980 A biblioteca Apache Commons Text é uma biblioteca alternativa às funcionalidades nativas do JDK do Java. Versões anteriores à versão 1.10.0 do Apache Commons Similar ao CVE-2022-33980 root@kitploit: python3 text4shell.py -u...

CVE-2022-42889-PoC

CVE-2022-42889 PoC Esta é uma Prova de Conceito para a vulnerabilidade CVE-2022-42889. Este código executará o código JavaScript 195 + 324. Se vulnerável, a saída deve ser: root@kitploit: PoC Output: 519 Para executar isto, você precisará de: JDK 11 ou superior Maven Quando solicitado por uma...

commons-text-goat

Commons-Text Goat Dies ist eine Web-App, die absichtlich anfällig für CVE-2022-42889 ist. Es verwendet einen eingebetteten Jetty-Server und Maven, um einen Servlet zu starten, der auf Port 8080 unter der URL \api lauscht. Dieser Endpunkt akzeptiert einen URL-Parameter cmd. Dieser wird zwischen $...

CVE-2026-52616

CVE-2026-52616 — mcp-nmap-server: iniezione di comandi del sistema operativo tramite runnmapscan Lo strumento MCP runnmapscan costruisce il proprio comando interpolando come stringa i parametri target e additionalFlags e lo esegue tramite childprocess.exec, cioè /bin/sh -c. ⚠ Leggi prima —...

ICT287-CVE-2022-42889

ICT287-CVE-2022-42889 Per trovare la documentazione completa sulla configurazione e ricreazione dell'exploit, consultare il file "CVE-2022-42889-Project Vulnerability Exploitation Report". La macchina virtuale utilizzata per costruire ed eseguire l'exploit non è inclusa in questo repository. Setu...

CVE-2026-59859

Kiota’s PHP generator (prior to 1.32.4) embeds OpenAPI-derived strings directly into PHP double-quoted literals via SanitizeDoubleQuote(), without escaping $. This permits attacker-controlled interpolation constructs like ${…}, $var, or {$obj-&gt;prop} to inject arbitrary PHP code into generated ...

CVE-2026-61444

PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agentsfile parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen...

CVE-2026-61444

PRAISONAi before 4.6.78 has a code‑injection vulnerability in deploy/api.py: the agents_file parameter is interpolated into an f-string without sanitization, allowing arbitrary Python code execution when the generated server code runs via subprocess.Popen(). Affected: PraisonAI

perl-IO-Compress security update

2.081-2 - Remove use of eval in File::GlobMapper for safer string interpolation - Resolves: RHEL-180411...

Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation

Vulnerability Details CWE: CWE-943 - Improper Neutralization of Special Elements in Data Query Logic All 66+ CQL queries in internal/storage/db/cassandradb/ use fmt.Sprintf to interpolate user-controlled values directly into CQL query strings without parameterization. Unauthenticated endpoints...

CVE-2026-31862 Cloud CLI has Command Injection via Multiple Parameters

Cloud CLI aka Claude Code UI is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, multiple Git-related API endpoints use execAsync with string interpolation of user-controlled parameters file, branch, message, commit, allowing authenticated attackers to...

GHSA-5MQ8-78GM-PJMQ defuddle vulnerable to XSS via unescaped string interpolation in _findContentBySchemaText image tag

Summary The findContentBySchemaText method in src/defuddle.ts interpolates image src and alt attributes directly into an HTML string without escaping: typescript html += ; An attacker can use a " in the alt attribute to break out of the attribute context and inject event handlers. This is a...

defuddle vulnerable to XSS via unescaped string interpolation in _findContentBySchemaText image tag

Summary The findContentBySchemaText method in src/defuddle.ts interpolates image src and alt attributes directly into an HTML string without escaping: typescript html += ; An attacker can use a " in the alt attribute to break out of the attribute context and inject event handlers. This is a...

CVE-2023-34112

JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the bytedeco/javacpp-presets use the github.event.headcommit.message​ parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection...

CVE-2023-30623 Arbitrary command injection in embano1/wip

embano1/wip is a GitHub Action written in Bash. Prior to version 2, the embano1/wip action uses the github.event.pullrequest.title parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerability due to string interpolation. This...