186825 matches found
RHEL 9 : vim (RHSA-2026:75768)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:75768 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Arbitrary command execution via crafted tags file in ...
Cisco ASA OS Command Injection (CVE-2024-20358)
A vulnerability in the Cisco Adaptive Security Appliance ASA restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level...
Linux Distros Unpatched Vulnerability : CVE-2026-105326
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mail...
Cisco ASA Argument Injection (CVE-2026-20016)
A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attack...
Command Injection vulnerability exists in the Brocade Fabric OS WebTools management (CVE-2026-94586)
: A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using...
tesla-security-research
特斯拉安全研究 对特斯拉 Model 3/Y 信息娱乐系统（Intel Atom MCU，Linux 4.14.235）的漏洞研究，已通过 Bugcrowd 向特斯拉负责任的披露。 通过特斯拉 ODIN 诊断接口的命令注入漏洞 CVE-2022-42008，在一台量产特斯拉 Model 3 上获得了持久的 root 访问权限。由此，又发现了五个额外漏洞——包括一种能够抵御固件更新的持久化方法（CVE-2022-42005，CVE-2022-42006）以及一种伪造 Safety Score 保险遥测数据的方法，该方法直接将月保费从 130 美元降至 83 美元。 ODIN、hermes ...
GHSA-X6JW-M9V5-85VH simple-git unsafe-operation guard does not block trailer command configuration
Affected product The default blockUnsafeOperationsPlugin in simple-git when an application permits untrusted values to reach SimpleGitOptions.config or Git inline configuration arguments such as -c =. Summary trailer..cmd is not recognized as unsafe by the default guard. Therefore, a configured...
NPM: simple-git unsafe-operation guard does not block trailer command configuration
NPM: simple-git unsafe-operation guard does not block trailer command configuration vulnerability discovered by ? in WordPress Npm simple-git versions = 3.15.0, 4.0.1...
EUVD-2026-89334
simple-git unsafe-operation guard does not block trailer command configuration...
simple-git unsafe-operation guard does not block trailer command configuration
Affected product The default blockUnsafeOperationsPlugin in simple-git when an application permits untrusted values to reach SimpleGitOptions.config or Git inline configuration arguments such as -c =. Summary trailer..cmd is not recognized as unsafe by the default guard. Therefore, a configured...
GHSA-G4WM-2VF7-VFGR simple-git allows command execution through unblocked Git configuration includes
Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...
EUVD-2026-89332
simple-git allows command execution through unblocked Git configuration includes...
simple-git allows command execution through unblocked Git configuration includes
Summary An OS command injection vulnerability in git.clone allows any application that flows attacker-influenced data into customArgs to execute arbitrary code. simple-git 3.36.0 current latest on npm ships without any include.path entry in the blockUnsafeOperationsPlugin denylist. Passing -c...
NPM: simple-git allows command execution through unblocked Git configuration includes
NPM: simple-git allows command execution through unblocked Git configuration includes vulnerability discovered by ? in WordPress Npm simple-git versions = 3.36.0...
NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation --receive-p/--exe - command execution residual of CVE-2026-28291 vulnerability discovered by ? in WordPress Npm simple-git versions = 3.36.0...
EUVD-2026-89333
simple-git: unsafe-operations plugin bypass via git long-option abbreviation --receive-p/--exe - command execution residual of CVE-2026-28291...
simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
simple-git's blockUnsafeOperationsPlugin blocks dangerous git options --upload-pack/--receive-pack/--exec/... unless the consumer opts in via unsafe:allowUnsafePack:true. Detection @simple-git/argv-parser detectVulnerableFlags matches the parsed flag NAME against literal-spelling patterns:...
GHSA-858H-WHJF-MVG5 simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
simple-git's blockUnsafeOperationsPlugin blocks dangerous git options --upload-pack/--receive-pack/--exec/... unless the consumer opts in via unsafe:allowUnsafePack:true. Detection @simple-git/argv-parser detectVulnerableFlags matches the parsed flag NAME against literal-spelling patterns:...