Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.May 8, 2026
- Critical9.8PraisonAI is a multi-agent teams system.May 8, 2026
- High7.3A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter.May 8, 2026
- Medium6.3/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a…May 8, 2026
- Medium5.3In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced an…May 8, 2026
- Critical9.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.May 8, 2026
- Critical9.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.May 8, 2026
- Low2.1A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84.May 7, 2026
- Critical9.6Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose inform…May 7, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- Medium6.4A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access f…May 6, 2026
- High8.8HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability.May 6, 2026
- High7.7In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents.May 5, 2026
- High7.3A weakness has been identified in EFM ipTIME C200 up to 1.092.May 5, 2026
- High8.9A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521.May 5, 2026
- Medium5.5A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8.May 5, 2026
- Medium5.5A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89.May 5, 2026
- High7.8An issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachin…May 4, 2026
- Low2.1A weakness has been identified in privsim mcp-test-runner 0.2.0.May 4, 2026
- Low2.1A security vulnerability has been detected in Totolink WA300 5.2cu.7112_B20190227.May 4, 2026
- Low2.1A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227.May 4, 2026
- Low2.1A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227.May 4, 2026
- Low2.1A flaw has been found in JD Cloud JDCOS 4.5.1.r4518.May 3, 2026
- Medium5.5A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0.May 3, 2026