EUVD-2026-88601

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of the component SSID Processing. This manipulation of the argument ssid causes os command injection. The attack can be...

CVE-2026-101858 RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection

A flaw has been found in RaspAP raspap-webgui up to 3.5.5. Affected is the function WiFiManager::writeWpaSupplicant of the file src/RaspAP/Networking/Hotspot/WiFiManager.php of the component SSID Processing. This manipulation of the argument ssid causes os command injection. The attack can be...

CVE-2026-101858

A flaw in RaspAP raspap-webgui versions up to 3.5.5 allows for OS command injection . The vulnerability exists within the SSID Processing component, specifically in the WiFiManager::writeWpaSupplicant function located in the file src/RaspAP/Networking/Hotspot/WiFiManager.php. Attackers can achiev...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-101859: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in RaspAP raspap-webgui up to 3.5.5. Affected by this vulnerability is the function escapeshellcmd of the file ajax/openvpn/delovpncfg.php of the component OpenVPN Configuration Handler. Such manipulation of the argument cfgid leads to os command injection. The atta...

CVE-2026-79535

The mbailey VoiceMode software (versions

EUVD-2026-89361

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-79535

mbailey VoiceMode = 8.10.1 is vulnerable to OS Command Injection. The updateconfig MCP tool and the "voicemode config set" CLI writes a caller-supplied value into /.voicemode/voicemode.env without shell-safe escaping...

CVE-2026-102937: Improper Neutralization of Special Elements used in an OS Command

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote returns prompt text unchanged before activate.bat inserts it into a cmd.exe set "VAR=value" statement. An attacker who influences --prompt, VIRTUALENVPROMPT, or the corresponding...

CVE-2025-69212_PoC

CVE-2025-69212: OpenSTAManager 概念実証（PoC） このリポジトリは、OpenSTAManager 内で特定された脆弱性 CVE-2025-69212 を実証する概念実証（PoC）です。この脆弱性は、P7M（署名付き XML）ファイルのデコード機能に起因する OS コマンドインジェクションです。影響を受けるバージョンは 2.9.8 およびそれ以前です。 説明 CVE-2025-69212 は OpenSTAManager で発見されたセキュリティ脆弱性です。この PoC...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — P7Mファイル処理におけるOSコマンドインジェクション 概要 フィールド| 詳細 ---|--- CVE ID| CVE-2025-69212 重要度| CRITICAL CVSS 4.0: 9.4 CWE| CWE-78: OSコマンドインジェクション 影響を受けるバージョン| OpenSTAManager = 2.9.8 脆弱性のある関数| XML::decodeP7M in src/Util/XML.php 攻撃ベクトル| アップロードされたZIPアーカイブ内の悪意のあるファイル名 認証|...

CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS コマンドインジェクション RCE CVE-2025-69212 の概念実証エクスプロイトです。これは OpenSTAManager ;echo ".p7m 結果としてのシェル実行: openssl smime ... -in "invoice.p7m";;echo ".p7m" ... ^^^^^^^^^^^^ injected here 注: スラッシュ / は ZipArchive::extractTo によってパス区切り文字として扱われるため、ファイル名に直接含めることはできません。この PoC...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — AXIS mediaclip.cgi 操作系统命令注入 n-day 研究文章与 PoC — 针对 AXIS VAPIX Media Clip API 中 CVSS 7.1 操作系统命令注入漏洞的补丁后技术分析，通过黑盒测试针对 Axis 设备独立重新发现并验证。 Axis 官方公告未公布技术利用细节或公开 PoC（截至公告发布时，“Axis 不会提供有关该漏洞的更详细信息”，“目前没有公开已知的漏洞利用”）。本仓库记录了一项独立复现、基于证据的确认，仅在供应商修复（AXIS OS 12.7.36）普遍可用后发布。参见披露时间线。 摘要 | ---|---...

CVE-2026-55157

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. Any MCP client that can call the smartuser too...

CVE-2025-34030-PoC

CVE-2025-34030 - sar2html 'plot' パラメータ RCE CVSS: 10.0 緊急 脆弱性: OSコマンドインジェクション プログラミング言語: PHP エクスプロイトコード: Python 参照: https://nvd.nist.gov/vuln/detail/CVE-2025-34030 https://www.vulncheck.com/advisories/sar2html-command-injection 説明 sar2html バージョン 3.2.1 以下には、index.php の plot パラメータ（index.php?plot=;...

CVE-2026-55157

The token-optimizer-mcp software is vulnerable to OS command injection in the smart_user tool (specifically the get-user-info operation) prior to version 5.1.0 . The root cause is the unsafe interpolation of a user-controlled username argument into a shell command executed via execAsync(). Becaus...

CVE-2026-55157 Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. Any MCP client that can call the smartuser too...

CVE-2026-55157 Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. Any MCP client that can call the smartuser too...

CVE-2026-55157 Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. Any MCP client that can call the smartuser too...