8509 matches found
CVE-2026-19982
A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...
CVE-2026-19981 GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection
A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. This affects an unknown part of the component Wi-Fi Timer Power-Schedule Feature. Executing a manipulati...
CVE-2026-19978
A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...
CVE-2026-19978
CVE-2026-19978 affects jiantao88 android-mcp-server. The vulnerability is in the function child_process.exec within the file build/index.js of the Command Execution component. An attacker can manipulate arguments such as deviceId , packageName , permission , and extras[].key/value to trigger OS c...
PT-2026-76657
Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with local access could exploit this flaw to execut...
PT-2026-76659
Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description An OS Command Injection issue exists due to the improper neutralization of special elements used in an OS command. A low privileged attacker with local access could exploit this flaw to...
PT-2026-76658
Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with local access could exploit this flaw to achiev...
CVE-2026-18503 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-73682
CVE-2026-73682 affects Semaphore prior to version 2.18.20. The vulnerability is an OS command injection via the repository handling of git_url, allowing an authenticated project Manager or Owner to trigger remote code execution on the Semaphore server host by crafting a malicious git_url with git...
CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
GHSA-XHF4-832V-7XCR vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71310 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-19188 Haiwell IoT Cloud HMI Gateway OS Command Injection
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...
EUVD-2026-58755
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...
GO-2026-4344 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2026-5233 vulnerabilities
Vulnerabilities for packages: cg...
GO-2025-3953 vulnerabilities
Vulnerabilities for packages: temporal...