97160 matches found
CVE-2026-80143 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented...
CVE-2026-65130
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
CVE-2026-65130
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
CVE-2026-65130
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
CVE-2026-65130
NVIDIA Infrastructure Controller for Linux is vulnerable to OS command injection (CWE-78). An attacker could exploit this flaw to achieve code execution , data tampering , denial of service , and information disclosure . The vulnerability is addressed in the updated software version 2.0 . Users a...
EUVD-2026-84416
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
ROOT-APP-PYPI-GHSA-HMQ2-W58F-27JC GHSA-hmq2-w58f-27jc in GitPython - Patched by Root
Root has patched GHSA-hmq2-w58f-27jc in the GitPython package for Root:PyPI. Multiple fixed versions available...
Security update for php-composer2
This update for php-composer2 fixes the following issues: CVE-2026-45793: GitHub OAuth tokens failing regex validation can cause credential disclosure bsc1271504. CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898. CVE-2026-59946: packa...
SUSE-SU-2026:4283-1 Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2026-45793: GitHub OAuth tokens failing regex validation can cause credential disclosure bsc1271504. - CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898. - CVE-2026-59946:...
Web-App-PenTesting
--- 🚀 Quick Start 1. Clone the repository bash git c...
Exploit for CVE-2026-93674
Description POC-CVE-2026-93674 Authe...
CVE-2026-94490
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: In the versions that have this feature, they are an admin-gated, admin-defined, by-design shell-comman...
CVE-2026-94490
...
EUVD-2026-84249
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...
CVE-2026-94490
A security flaw exists in OctoPrint version 1.0.0 within the Command API component. Specifically, the executeSystemCommand() function in the file src/octoprint/server/api/system.py fails to properly neutralize special elements, leading to an OS command injection vulnerability. A remote attacker c...
CVE-2026-16468: Improper Neutralization of Special Elements used in an OS Command
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection...
CVE-2026-16346: Improper Authorization
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
PT-2026-97064
Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to...
PT-2026-97067
Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description The px-runtime component contains a flaw where special elements used in OS commands are not properly neutralized. This allows a remote authenticated attacker to execute arbitrary...