An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before...
CVE-2026-85656
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a lo
#severity:high
共收录 5383 条相关情报。
← 返回所有主题CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository
CVE-2026-75911
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)
CVE-2026-75858
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval
CVE-2026-75912
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: js_execution leaks parent environment to model context via missing env scrub
CVE-2026-75915
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval
CVE-2026-75913
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)
CVE-2026-75857
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
CVE-2026-75859
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes
CVE-2026-75914
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability....
CVE-2026-85147
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS...
CVE-2026-67398
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8,
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the...
CVE-2026-85451
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP...
CVE-2026-85450
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates unbounde
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to...
CVE-2026-67397
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code
MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from...
CVE-2026-85449
MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, al
MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and...
CVE-2026-85452
MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a...
CVE-2026-85455
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet trigger
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms...
CVE-2026-85446
MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node ident
MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative...
CVE-2026-85441
MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer:...
CVE-2026-85443
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accep