CVE-2026-93533

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

CVE-2026-14802

CVE-2026-14802 Nombre del software vulnerable y versiones afectadas create-react-app versiones anteriores a la 5.0.2 Descripción En macOS, la función startBrowserProcess dentro del archivo openBrowser.js del componente react-dev-utils permite la inyección de comandos del sistema operativo. Este...

CVE-2026-81942

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-93533 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

CVE-2026-93533

spatie Scotty (a Laravel package) is affected by an OS command injection in the Doctor Command Handler component, specifically in the DoctorCommand::checkSshConnectivity and DoctorCommand::checkRemoteTools functions within app/Commands/DoctorCommand.php. The vulnerability exists in versions up to...

CVE-2026-93533 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — Análisis de Vulnerabilidad de ScadaBR Análisis técnico de vulnerabilidad e informe CVE para CVE-2026-9645 , que afecta a la plataforma de código abierto ScadaBR SCADA/HMI. Resumen CVE-2026-9645 es una vulnerabilidad crítica de ejecución remota de código autenticada en ScadaBR. Seg...

CVE-2025-14754 IBM Cloud Pak for Data is vulnerable to OS command injection

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

CVE-2025-14754

IBM Cloud Pak for Data 5.1.2 is vulnerable to OS command injection (CWE-78) due to improper validation of user-supplied input. An authenticated remote attacker can exploit this to execute arbitrary commands with elevated privileges, potentially leading to full system compromise. The CVSS 3.1 base...

CVE-2025-14754 IBM Cloud Pak for Data is vulnerable to OS command injection

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

CVE-2026-81942 PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-81942 PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-81942

The PLANET IGS-5225-8P2T4S industrial managed switch (V1 and V2) contains an OS command injection vulnerability in its web server . User-supplied input is passed to system() without sufficient filtering, enabling a remote authenticated attacker to execute arbitrary commands on the underlying OS a...

EUVD-2026-82987

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-22226

CVE-2026-22226 Prueba de concepto para CVE-2026-22226 Inyección de comandos del sistema operativo autenticada en el lado LAN en el cliente VPN de los routers Wi-Fi TP-Link Archer Resumen de la vulnerabilidad El controlador del cliente VPN almacena la descripción de la entrada controlada por el...

CVE-2026-83548-checker

SonicWall SMA 1000 — Detector de exposición CVE-2026-83548 / CVE-2026-83549 Un script de detección no intrusivo para los dispositivos de la serie SonicWall Secure Mobile Access SMA 1000 afectados por CVE-2026-83548 SSRF previo a la autenticación en la interfaz Work Place, CVSS 10.0 y CVE-2026-835...

FORTIWEB_CVE-2025-64446-58034

Simulación de explotación de FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Este documento es solo para fines educativos y de investigación de seguridad. No lo utilice para atacar sistemas sin autorización. 1. Resumen FortiWeb es un dispositivo Web Application Firewall WAF utilizado para proteger...

CVE-2026-26832

CVE-2026-26832: Inyección de comandos del sistema operativo en node-tesseract-ocr Resumen node-tesseract-ocr hasta la versión 2.2.1 permite la inyección de comandos del sistema operativo en recognize en src/index.js. El paquete construye una cadena de comando de shell y la ejecuta con...

VulnCheck KEV: CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

CVE-2020-8958

Una prueba de concepto para CVE-2020-8958 escrita en Python. El script devolverá el contenido de /etc/passwd si tiene éxito. CVE-2020-8958 Los dispositivos Guangzhou 1GE ONU V2801RW 1.9.1-181203 hasta 2.9.0-181024 y V2804RGW 1.9.1-181203 hasta 2.9.0-181024 permiten a atacantes remotos ejecutar...