CVE-2026-37751

An OS command injection vulnerability in the killSessionSync function lib/agent-runtime.ts of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input...

CVE-2026-37751

An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows remote attackers to execute arbitrary commands via a crafted input. The vulnerability is rated CVSS 9.8 (Critical) with a network attack vector requiring no privi...

CVE-2020-8958

Una proof of concept per CVE-2020-8958 scritta in Python. Lo script restituirà il contenuto di /etc/passwd se ha successo. CVE-2020-8958 I dispositivi Guangzhou 1GE ONU V2801RW 1.9.1-181203 fino a 2.9.0-181024 e V2804RGW 1.9.1-181203 fino a 2.9.0-181024 consentono ad attaccanti remoti di eseguire...

cve-2019-14514

ID CVE : CVE-2019-14514 Nome del prodotto o dei prodotti interessati e versioni : Microvirt MEmu tutte le versioni precedenti alla 7.0.2 Tipo di problema : CWE-78: Neutralizzazione impropria di elementi speciali usati in un comando del sistema operativo 'Iniezione di comandi del sistema operativo...

CVE-2026-78037

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface . An authenticated attacker can execute arbitrary operating system commands with elevated privileges, potentially leading to unauthorized access to sensitive information or complete device compromise ...

CVE-2019-25065-exploit

CVE-2019-25065 - POC Questo è un POC di CVE-2019-25065 - iniezione di comandi nel sistema operativo in OpenNetAdmin v18.1.1 L'exploit è scritto in bash, supporta ambiente Linux. È stato testato su Kali Linux 2024.4 e Ubuntu 22.04.5 LTS dipendenze: pacchetto Debian gridsite-clients...

CVE-2026-76060 OS Command Injection in PayRange API

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

CVE-2025-26055

CVE-2025-26055 Descrizione CVE Autore : Rohan Deshpande Iniezione di Comandi del Sistema Operativo Riepilogo L'iniezione di comandi del sistema operativo è una vulnerabilità di sicurezza che consente a un attaccante di eseguire comandi arbitrari su un sistema operativo host tramite un'applicazion...

CVE-2025-67888

CVE-2025-67888 Vulnerabilità di Iniezione di Comandi del Sistema Operativo in Control Web Panel = 0.9.8.1208 admin/index.php Versioni Affette: Versione 0.9.8.1208 e versioni precedenti. Descrizione della Vulnerabilità: L'input utente passato tramite il parametro GET "key" a /admin/index.php quand...

cve-2015-2208

Dockerfile per simulare l'ambiente per CVE-2015-2208 La funzione saveObject in moadmin.php in phpMoAdmin 1.1.2 consente ad attaccanti remoti di eseguire comandi arbitrari tramite metacaratteri di shell nel parametro object. Scoperto da: @u0x Pichaya Morimoto, Xelenonz, pe3z, Pistachio Riferimenti...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 descrive una vulnerabilità di OS Command Injection Iniezione di comandi di sistema presente nel software My Computer del sistema operativo Pardus. Questa vulnerabilità consente a un utente di iniettare comandi di sistema tramite il parametro nome file, permettendo co...

CVE-2022-31499

CVE-2022-31499 Titolo exploit: Nortek Linear eMerge E3-Series - Iniezione di comandi OS cieca...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...

CVE-2021-22123

CVE-2021-22123 Fortinet FortiWeb Authentifizierte OS-Befehlseinschleusung Hit Counter Die Schwachstelle zur Befehlseinschleusung in der FortiWeb-Verwaltungsoberfläche könnte einem authentifizierten entfernten Angreifer ermöglichen, über die SAML-Serverkonfigurationsseite beliebige Befehle im Syst...

EUVD-2026-67136

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

CVE-2026-81562

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

CVE-2026-81562

CVE-2026-81562 is an OS command injection vulnerability in AlexGladkov claude-in-mobile version 3.10.2 , affecting the execSync function in the file src/adb/client.ts . A local attacker with low privileges can manipulate input to inject operating system commands, leading to partial compromise of ...

CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

CVE-2026-73570

CVE-2026-73570 — Exploit RCE tramite notifica SNMP di Zimbra ZCS PoC Esecuzione remota di codice non autenticata tramite iniezione di comandi nel sistema operativo nel gestore delle notifiche SNMP di Zimbra Collaboration Suite. Panoramica...