📦 Hummerrisk

This vulnerability in HummerRisk allows authenticated users with normal privileges to exploit a vulnerable Snakeyaml component via the /rule/add API endpoint, leading to remote code execution and pote...

This vulnerability allows authenticated attackers to execute arbitrary code on HummerRisk systems via a crafted request to the LicenseService component. It affects all organizations running vulnerable...

This CVE describes a command injection vulnerability in HummerRisk's Cloud Compliance Scanning component. Attackers can execute arbitrary commands on affected systems by manipulating the fixedCommand ...

This vulnerability allows remote attackers to execute arbitrary commands on HummerRisk systems by injecting malicious input into the regionId parameter of the Cloud Task Scheduler component. The vulne...