Lucene search
+L

5280 matches found

CNNVD
CNNVD
added 2026/01/08 12:00 a.m.38 views

V-SOL GPON/EPON OLT Platform 输入验证错误漏洞

V-SOL GPON/EPON OLT Platform is an optical line terminal management platform from China Semiconductor V-SOL. An input validation error vulnerability exists in V-SOL GPON/EPON OLT Platform version v2.03, which stems from improper validation of the parent parameter input and could lead to an open...

9.8CVSS6.7AI score0.00388EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/08 12:00 a.m.29 views

CVE-2025-65731

An issue was discovered in D-Link Router DIR-605L Hardware version F1; Firmware version: V6.02CN02 allowing an attacker with physical access to the UART pins to execute arbitrary commands due to presence of root terminal access on a serial interface without proper access control...

0.00397EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/01/07 11:10 p.m.46 views

CVE-2019-25282 V-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Open Redirect via bindProfile.html

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect...

9.8CVSS0.00388EPSS
SaveExploits1References5
OSV
OSV
added 2026/01/07 6:30 p.m.11 views

GHSA-H4RF-624J-GJ33 terminal-controller-mcp vulnerable to Command Injection

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS8.1AI score0.01967EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/01/07 6:30 p.m.11 views

terminal-controller-mcp vulnerable to Command Injection

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS8.2AI score0.01967EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2026/01/07 6:15 p.m.13 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS0.01967EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.12 views

PT-2026-1826

Name of the Vulnerable Software and Affected Versions terminal-controller-mcp version 0.1.7 Description A command injection issue exists in the execute command function of the software. Attackers can execute arbitrary commands by providing a crafted input. The vulnerability can lead to arbitrary...

10CVSS8.4AI score0.01967EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
added 2026/01/07 12:00 a.m.4 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

7.7AI score0.01967EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/07 12:00 a.m.35 views

CVE-2025-61492

The CVE describes a command injection in terminal-controller-mcp 0.1.7, specifically in the execute_command function. Attackers can inject commands via crafted input to achieve arbitrary command execution, with the CVSSv3.1 scoring indicating network access, low attack complexity, and no privileg...

10CVSS7.7AI score0.01967EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/01/07 12:00 a.m.8 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

10CVSS6.2AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/01/07 12:00 a.m.34 views

CVE-2025-61492

A command injection vulnerability in the executecommand function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input...

0.01967EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/06 3:52 p.m.4 views

CVE-2020-36915 Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec...

8.7CVSS7.5AI score0.00344EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/06 12:00 a.m.32 views

PT-2026-1449

Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauthenticated remote access to web, telnet, and SSH interfaces. Attackers can exploit these credentials to gain root-level access and execute system commands across multiple Adtec...

8.7CVSS7.8AI score0.00344EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2026/01/03 12:00 a.m.10 views

The vulnerability of the command-line interface (CLI) of NPort terminal server software products, models 6100-G2/6200-G2, allows a hacker to alter the device’s configuration data.

The vulnerability of the command-line interface CLI of NPort terminal server software for models 6100-G2/6200-G2 is related to deficiencies in the access control mechanism. Exploiting this vulnerability could allow a malicious actor to alter the device’s configuration data remotely...

9CVSS5.7AI score0.0034EPSS
SaveExploits0References2Affected Software2
Fedora
Fedora
added 2026/01/02 12:57 a.m.13 views

[SECURITY] Fedora 42 Update: direwolf-1.8.1-1.fc42

Dire Wolf is a modern software replacement for the old 1980's style TNC built with special hardware. Without any additional software, it can perform as an APRS GPS Tracker, Digipeater, Internet Gateway IGate, APRStt gateway. It can also be used as a virtual TNC for other applications such as...

8.7CVSS6.7AI score0.00497EPSS
SaveExploits0
Fedora
Fedora
added 2026/01/02 12:41 a.m.15 views

[SECURITY] Fedora 43 Update: direwolf-1.8.1-1.fc43

Dire Wolf is a modern software replacement for the old 1980's style TNC built with special hardware. Without any additional software, it can perform as an APRS GPS Tracker, Digipeater, Internet Gateway IGate, APRStt gateway. It can also be used as a virtual TNC for other applications such as...

8.7CVSS6.7AI score0.00497EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/01 5:04 a.m.196 views

Exploit for CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 Command injection via unsa...

6.6CVSS8.2AI score0.01195EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2026/01/01 12:24 a.m.7 views

SUSE CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

3.3CVSS6.7AI score0.0046EPSS
SaveExploits0References10
OSV
OSV
added 2025/12/30 5:44 p.m.13 views

GHSA-59PP-R3RG-353G Composer is vulnerable to ANSI sequence injection

Impact Attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit...

5.1CVSS6.7AI score0.0046EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2025/12/30 5:44 p.m.13 views

Composer is vulnerable to ANSI sequence injection

Impact Attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and potentially leading to confusion or DoS of the terminal application. There is no proven exploit...

5.3CVSS6.8AI score0.0046EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder