Search Vulnerabilities

cal.com Repository Takeover via pull_request_target Workflow

localstack serverless-localstack Configuration index.js os command injection

DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

release-it conventional-changelog Changelog File index.js writeChangelog os command injection

bahmutov find-cypress-specs Branch index.js shell.exec os command injection

publint package-manager pack.js child_process.exec os command injection

syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection

danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection

oclif JIT Plugin Entry child_process.exec os command injection

umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection

jsforce SFDX Connection Registry sfdx.js _execCommand os command injection

QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow

D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection

LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection

SurrealDB before 2.2.2 SurrealQL Injection via export

Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)

Windows Admin Center (WAC) Remote Code Execution Vulnerability

Outlook Copilot Tampering Vulnerability