Lucene search
+L

1659 matches found

CNNVD
CNNVD
added 2025/11/11 12:00 a.m.11 views

SAP Business Connector 操作系统命令注入漏洞

SAP Business Connector is a middleware from SAP, Germany. SAP Business Connector suffers from an operating system command injection vulnerability that stems from OS command injection and could lead to the execution of arbitrary operating system commands...

6.8CVSS7.4AI score0.00814EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/11 12:00 a.m.10 views

PT-2025-46548

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.5 and earlier Description A Use After Free issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is...

7.8CVSS7.3AI score0.00201EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/06 3:53 p.m.34 views

CVE-2025-47588

CVE-2025-47588 affects the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (aco-woo-dynamic-pricing) up to version 4.5.9. Description and connected sources indicate an Improper Control of Generation of Code leading to Code Injection and Arbitrary Code Execution. CVSSv3.1 base...

9.1CVSS6.6AI score0.0044EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/30 10:15 p.m.17 views

CVE-2024-14005

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

8.8CVSS6AI score0.04132EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/30 9:37 p.m.33 views

CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...

9.4CVSS0.04132EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/13 12:00 a.m.10 views

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A SQL injection vulnerability exists in WeGIA versions prior to 3.5.1, which stems from a SQL injection vulnerability in the iddependente parameter in the /html/funcionario/dependentedocumento.php endpoin...

9.4CVSS7.8AI score0.00893EPSS
SaveExploits3References5
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.12 views

Cherry Studio 代码注入漏洞

Cherry Studio is a multi-model AI assistant from China's Thousand Comets Cherry Studio. A code injection vulnerability exists in Cherry Studio, which stems from the direct execution of commands in base64-encoded configuration data when processing URLs of type cherrystudio://mcp, which could lead ...

9.6CVSS7.7AI score0.00471EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/10/09 12:00 a.m.12 views

D-Link DIR-816A2 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-816A2 FWv1.10CNB05 version, which originates from the statuscheckpppoeuser parameter in the dirsetWanWifi function that fails to correctly validate the length and size of the input...

7.5CVSS8AI score0.05714EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/10/08 2:13 p.m.12 views

CVE-2025-54404

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...

8.8CVSS7.9AI score0.04571EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/07 8:15 p.m.11 views

CVE-2025-36565

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...

6.7CVSS5.9AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/07 1:55 p.m.24 views

CVE-2025-54403

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...

8.8CVSS0.04571EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/07 1:55 p.m.4 views

CVE-2025-54403

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...

8.8CVSS7.5AI score0.04571EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/07 1:55 p.m.34 views

CVE-2025-54405

Planet WGR-500 v1.3411b190912 has OS command injection in the formPingCmd functionality. Two parameters, ipaddr and counts, are used to build a shell command via system("ping -c 2&gt;&1 &gt; /tmp/pingResult &"), allowing arbitrary command execution when specially crafted HTTP requests are sent....

8.8CVSS7.5AI score0.04264EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2009-0811

Malware in sbrugna...

9.3CVSS6.4AI score0.09085EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2008-4844

Malware in sbrugna...

7.2CVSS6.1AI score0.00433EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2021-1695

Malware in sbrugna...

6.1CVSS6.3AI score0.00641EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-0033

Malware in sbrugna...

7.8CVSS7.5AI score0.00789EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2015-1470

Malware in sbrugna...

6.8CVSS6.1AI score0.01435EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2001-0090

Malware in sbrugna...

5.1CVSS6.4AI score0.03869EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2018-10569

Malware in sbrugna...

7.8CVSS7.6AI score0.01571EPSS
SaveExploits5References5
Rows per page
Query Builder