GHSA-68MJ-5WR7-6FGG vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, cassandra-reaper, druid...

CVE-2026-73055

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...

CVE-2026-73055

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...

CVE-2026-73651 vulnerabilities

Vulnerabilities for packages: redisinsight...

GO-2023-1730 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2024-2617 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3845 vulnerabilities

Vulnerabilities for packages: gatus...

GHSA-FQJ9-69PF-6PJG vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-71849 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, kibana, langfuse-fips, langfuse...

EUVD-2026-36312

OpenClaw: Combined POSIX shell options could confuse exec revalidation...

OS Command Exec, Unix Command Shell, Bind TCP (via socat)

Execute an OS command from PHP. Creates an interactive shell via socat Module Options msf use payload/php/unix/cmd/bindsocattcp msf payloadbindsocattcp show actions ...actions... msf payloadbindsocattcp set ACTION msf payloadbindsocattcp show options ...show and set options... msf...

CVE-2026-30302

The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems from the incorrect use of an incompatible command parser the Unix-based shell-quote library to analyze commands on the...

CVE-2026-30302

The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems from the incorrect use of an incompatible command parser the Unix-based shell-quote library to analyze commands on the...

CVE-2026-30303

CVE-2026-30303 concerns Axon Code’s command auto-approval module, which is vulnerable to OS Command Injection. The root cause is the use of an incompatible Unix-style command parser (shell-quote) on Windows, coupled with improper handling of Windows CMD escape sequences (^). This mismatch allows ...

Exploit for CVE-2025-55182

React2Shell Scanner High Fidelity Detection & Exploitation To...

EUVD-2000-1119

Malware in sbrugna...

EUVD-2006-2044

Malware in sbrugna...

EUVD-2019-7866

Malware in sbrugna...

EUVD-2022-50292

Malicious code in bioql PyPI...

log4shell-detector

This is a Gradle wrapper script for a Java project. Here's a breakdown of the key points: Purpose: The script is used to start a Gradle build process. License: The script is licensed under the Apache License, Version 2.0. Functionality: The script sets up the environment for the Gradle build...