CVE-2026-82804 Apache DolphinScheduler: Command Injection in the Alert Script Plugin

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-82804

The Apache DolphinScheduler (versions before 3.4.3 ) is vulnerable to command injection in the Alert Script plugin . The root cause is the incorporation of the scriptPath parameter into a /bin/sh -c command without sufficient neutralization of shell metacharacters. An authenticated user can explo...

CVE-2026-82804 Apache DolphinScheduler: Command Injection in the Alert Script Plugin

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

EUVD-2026-88812

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-82973 Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configured, to inject additional IMAP commands into an authenticated upstream mailbox connection via...

EUVD-2026-88759

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configured, to inject additional IMAP commands into an authenticated upstream mailbox connection via...

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

EUVD-2026-88756

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437

The esengine DeepSeek-Reasonix (Reasonix Studio) desktop application contains an OS Command Injection vulnerability in the internal/gitcmd component. The root cause is the improper neutralization of special elements during the invocation of git diff filter.clean/smudge . A local attacker who can ...

Improper Certificate Validation

org.apache.sshd, sshd-core is vulnerable to improper certificate validation. The vulnerability is due to the server-side authentication process not validating force-command and verify-required certificate options, which allows an attacker with a specially crafted OpenSSH user certificate to...

Netcore NAP930 CVE-2026-102240 network_tools RCE

Exploits CVE-2026-102240 in Netcore NAP930 via GET /cgi-bin/networktools?sid=';CMD;:'. The shell CGI evals QUERYSTRING before the session-id authorization check. Quotes and semicolons must be sent raw not URL-encoded. !/usr/bin/env python3 -- coding: utf-8 -- """Netcore NAP930 CVE-2026-102240...

Netcore NR289-GE CVE-2026-101072 ap_ip.cgi RCE

Exploits CVE-2026-101072 via POST /x.ico/apip.cgi on Netcore NR289-GE AC controllers. The ip form field breaks out of a wget --post-data shell command. Requires a bound AP MAC; payload length is limited to 19 bytes. !/usr/bin/env python3 -- coding: utf-8 -- """Netcore NR289-GE CVE-2026-101072...

Netcore NR289-GE CVE-2026-101076 NTP CGI RCE

Exploits CVE-2026-101076 via POST /x.ico/setntpserverip.cgi on Netcore NR289-GE AC controllers. The ntpip parameter is embedded into a wget shell invocation without sanitization. !/usr/bin/env python3 -- coding: utf-8 -- """Netcore NR289-GE CVE-2026-101076 setntpserverip.cgi command injection."""...

Netcore NAP930 CVE-2026-102240 Detect

Detects CVE-2026-102240 in Netcore NAP930 access points: pre-auth command injection in /cgi-bin/networktools via eval on raw QUERYSTRING before the sid session check. Confirms endpoint presence and optionally writes a marker file to /www/ when activeprobe is enabled. !/usr/bin/env python3 --...

Netcore NR289-GE CVE-2026-101072 Detect

Detects CVE-2026-101072 in Netcore NR289-GE: unauthenticated OS command injection via POST /x.ico/apip.cgi boa .ico auth bypass. The ip parameter is embedded into a wget shell command without validation. Uses a short echo probe when activeprobe is enabled. !/usr/bin/env python3 -- coding: utf-8 -...

SonicWall SMA1000 CVE-2026-83549 RCE Chain Detect

Detects SMA1000 firmware branches vulnerable to CVE-2026-83549 when chained with CVE-2026-83548. Fingerprints WorkPlace/AMC build headers and flags pre-hotfix platform versions 12.4.3 before 03526, 12.5.0 before 02952. Does not invoke sysCtrl or inject SNMP trap commands. !/usr/bin/env python3 --...

Citrix NetScaler CVE-2026-88771 Detect

Detects Citrix NetScaler ADC/Gateway instances likely affected by CVE-2026-88771. Confirms NetScaler presence, parses appliance build when exposed, and checks whether the AAA login path accepts the pitboss/PPE log trigger pattern used by nsmonuploadderr.pl. !/usr/bin/env python3 -- coding: utf-8 ...

Netcore NR289-GE CVE-2026-101076 Detect

Detects CVE-2026-101076 in Netcore NR289-GE: unauthenticated OS command injection via POST /x.ico/setntpserverip.cgi. The ntpip parameter is passed to system inside a wget command template. Uses a short echo probe when activeprobe is enabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detect...