189330 matches found
CVE-2026-84285 OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server...
CVE-2026-84285
An OS Command Injection vulnerability in Tuleap Enterprise Edition (versions 17.3 through 17.5) allows a network-based attacker with low privileges to execute arbitrary commands on the server , rated CVSS 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. The vulnerabili...
CVE-2026-84285 OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server...
CVE-2026-89139 Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host
Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a worker by running a command on the machine hosting the Worker Service. The program name and the argument vector that...
EUVD-2026-83897
Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a worker by running a command on the machine hosting the Worker Service. The program name and the argument vector that...
Exploit for CVE-2026-89026
CVE-2026-89026 --- Issabel PBXAPI Exploit & Scanner -------...
Exploit for CVE-2026-94095
Netcore NBR200V2 – Remote Command Injection in the Traceroute...
CVE-2026-94139
A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...
CVE-2026-94139 Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection
A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...
EUVD-2026-83832
A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...
CVE-2026-94139 Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection
A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...
CVE-2026-94139
A command injection vulnerability exists in the Cookie Handler component of the Chengdu Feiyuxing Technology Feiyu Star Router (version B-MB5E202-210322-r11656 ). Manipulation of the session_id argument in the file /send_order.cgi?parameter=loginout allows remote attackers to execute arbitrary co...
CVE-2026-94138
A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /sendorder.cgi?parameter=delexpmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. T...
EUVD-2026-83831
A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /sendorder.cgi?parameter=delexpmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. T...
CVE-2026-94138 Chengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection
A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /sendorder.cgi?parameter=delexpmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. T...
CVE-2026-94138
A command injection vulnerability exists in Chengdu Feiyuxing Technology Feiyu Star Router (version B-MB5E202-210322-r11656). The flaw resides in the /send_order.cgi script (parameter=del_expmac), where manipulation of the mac argument allows command execution. The attack can be launched remotely...
CVE-2026-94138 Chengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection
A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /sendorder.cgi?parameter=delexpmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. T...
MAL-2026-16317 Malicious code in testmgkregme (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496e8021fd5e2626c503e2ceeed8349ff15c68c71a5f19d8a57c67e5f1b41863 npm package [email protected] uses a binding.gyp whose sources field employs GYP command-expansion eval-AES-eval construction has no legitimate...
MAL-2026-16310 Malicious code in npx-test-ma980 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfd1e5f7cc282648da56cdf50ac9c3cb27d6165fa4a3f8f3625b4a0c2694be6 package.json declares a bin entry whose key contains shell metacharacters and a chained command: "tool & calc.exe": "./run.js". On Windows, npm's bin...
Malicious code in npx-test-ma980 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfd1e5f7cc282648da56cdf50ac9c3cb27d6165fa4a3f8f3625b4a0c2694be6 package.json declares a bin entry whose key contains shell metacharacters and a chained command: "tool & calc.exe": "./run.js". On Windows, npm's bin...