Search Vulnerabilities

Deno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass

Cursor has a Terminal Tool Allowlist Bypass via Environment Variables

Remote code injection via upload_map.cgi in Legacy Vivotek Devices

orval MCP client is vulnerable to a code injection attack.

Sangfor Operation and Maintenance Management System session SessionController os command injection

WeKnora has Command Injection in MCP stdio test

OpenProject is Vulnerable to Code Execution in E-Mail function

Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection

Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection

Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection

D-Link DI-8200G upgrade_filter.asp command injection

TRENDnet TEW-811DRU httpd  uapply.cgi setDeviceURL  os command injection

TRENDnet TEW-713RE formFSrvX os command injection

TOTOLINK WA300 cstecgi.cgi sub_401510 command injection

Colify has command injection vulnerability in project git source

Coolify vulnerable to command injection via docker-compose.yaml parameters

Tenda AC1206 httpd BehaviorManager formBehaviorManager command injection

D-Link DIR-806A SSDP Request ssdpcgi_main command injection

D-Link DI-7400G+ msp_info.htm command injection

serverless MCP Server vulnerable to command injection in list-projects tool