Latest

High-severity sandbox escape in OpenLearnX's Python execution environment allows crafted payloads to break out of the restricted runtime and execute arbitrary commands on the host.

Persistent Denial of Service in Kirby CMS via malformed image upload. An authenticated Editor can crash the application into an unrecoverable state by exploiting unchecked getimagesize() return values.

High-severity OS command injection in protobufjs-cli's pbts tool. User-supplied file paths are string-interpolated into a shell command and executed via child_process.exec(), enabling arbitrary command execution via crafted filenames.

High-severity OS command injection in uniget CLI where the check field from JSON metadata is passed directly to /bin/bash -c without validation, enabling arbitrary command execution via crafted metadata files.

Unsafe EDITOR environment variable parsing in uniget CLI v0.27.3 via strings.Split() allows unintended argument injection and command execution.

High-severity vulnerability in NexTOR IP Changer where sudo combined with shell-based execution could allow privileged command execution in permissive sudo configurations.

High-severity PATH injection vulnerability in NexTOR IP Changer where unsafe executable resolution through the PATH environment variable could allow arbitrary command execution.

Path traversal vulnerability in uniget CLI v0.27.3 allows local users to access and modify arbitrary files via directory escape sequences in hook filenames.

Moderate-severity JWT authentication bypass in OpenLearnX where insufficient signature verification could allow attackers to supply forged tokens and bypass identity validation.

Unauthenticated LFI in Bagisto allows arbitrary file read via path traversal without authentication. Disclosed via CERT-In and assigned CVE-2026-9506.