CVE-2025-11490 wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function extractBaseCommand of the file src/command-manager.ts of the component Absolute Path Handler. Such manipulation leads to os command injection. The attack may be performed from...

CVE-2025-60964

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, gain sensitive information, and possibly other unspecified impacts...

CVE-2025-43906

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

EUVD-2012-3457

Malware in sbrugna...

EUVD-2017-1487

Malware in sbrugna...

EUVD-2018-4894

Malware in sbrugna...

EUVD-2014-9816

Malware in sbrugna...

EUVD-2019-6644

Malware in sbrugna...

EUVD-2015-3653

Malware in sbrugna...

EUVD-2021-10304

Malware in sbrugna...

EUVD-2020-29851

Malware in sbrugna...

EUVD-2018-5268

Malware in sbrugna...

EUVD-2018-5266

Malware in sbrugna...

EUVD-2018-5259

Malware in sbrugna...

EUVD-2010-0740

Malware in sbrugna...

EUVD-2019-7563

Malware in sbrugna...

EUVD-2004-0047

Malware in sbrugna...

EUVD-2019-6927

Malware in sbrugna...

Unity Linux 20.1070e Security Update: xterm (UTSA-2025-680592)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680592 advisory. xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi...

CVE-2025-60957

OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...