PT-2025-14522

Уязвимость операционной среды для управления и обеспечения работы хранилища данных Dell Unity Operating Environment OE связана с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы. Эксплуатация уязвимости может позволить нарушителю повысить свои...

Security Bulletin: Vulnerabilities in Linux Kernel and Golang Go can affect IBM Spectrum Protect Plus

Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in Golang Go and Linux kernel. Vulnerabilities include obtaining sensitive information, gaining elevated privileges, executing arbitrary commands, denial of service, and bypassing security restrictions, as described by the CVEs ...

Security Bulletin: A vulnerability in IBM Spectrum Scale could allow a local attacker to execute arbitrary commands (CVE-2022-43867)

Summary A security vulnerability has been identified in IBM Spectrum Scale Container Native Access Storage that could allow a local attacker to execute arbitrary commands. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-43867 DESCRIPTION: IBM Spectrum Scale could...

SmartFabric OS10 Privilege Escalation Command Execution

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

Command Injection

Overview openmanus is an Add your description here Affected versions of this package are vulnerable to Command Injection in pythonexecute.py. An attacker can execute arbitrary commands on the system by injecting malicious commands into a prompt. Remediation There is no fixed version for openmanus...

D-Link DIR-823X command injection vulnerability

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that stems from /goform/setprohibiting failing to properly filter constructed command special characters, commands, and so on. An attacker can exploit this...

fprime command injection vulnerability

fprime is a NASA open source framework for flight software and embedded systems. A security vulnerability exists in fprime v3.4.3, which stems from command injection in the Command Dispatch Service and could lead to an attacker executing arbitrary commands...

TOTOLINK X5000R Router setWiFiScheduleCfg() Arbitrary Command Execution

The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the eMinute parameter. Exploiti...

PT-2025-12826

Name of the Vulnerable Software and Affected Versions NASA Fprime version 3.4.3 Description A command injection issue in the Command Dispatcher Service allows attackers to execute arbitrary commands. Recommendations For NASA Fprime version 3.4.3, consider disabling the Command Dispatcher Service...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55030

NASA Fprime v3.4.3 contains a command injection vulnerability (CWE-77) within the Command Dispatcher Service . This flaw allows an attacker to execute arbitrary commands on the system. The vulnerability is associated with the fprime-gds (PyPI) package, specifically version 4.3.0 , which may also ...

CVE-2025-0255

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

PT-2025-12663

Name of the Vulnerable Software and Affected Versions HCL DevOps Deploy / HCL Launch affected versions not specified Description The issue allows a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

HCL Launch and HCL DevOps Deploy security vulnerabilities

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

CVE-2025-29310

An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet. This vulnerability allows attackers to execute arbitrary commands or access network information...

CVE-2025-0255: Improper Neutralization of Special Elements used in an OS Command

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

CVE-2024-6825

BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution. The issue exists in the handling of the 'postcallrules' configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function...

CVE-2024-8156

A command injection vulnerability exists in the workflow-checker.yml workflow of significant-gravitas/autogpt. The untrusted user input github.head.ref is used insecurely, allowing an attacker to inject arbitrary commands. This vulnerability affects versions up to and including the latest version...

CVE-2025-2585

EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents...