CVE-2026-101007: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...

CVE-2026-100896: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is...

CVE-2026-86330: Improper Neutralization of Special Elements used in an OS Command

An OS command injection flaw was found in the sethostnameinternal function of NooBaa's clusterinternalapi. This component is responsible for managing the Multi-Cloud Object Gateway in OpenShift Data Foundation. The vulnerability occurs because the hostname parameter is passed directly to a shell...

CVE-2026-73570

CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...

CVE-2026-101045 Fleet Homebrew Cask OS Command Injection via Metadata

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101045 Fleet Homebrew Cask OS Command Injection via Metadata

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata at some interpolation sites but not all of them, so cask metadata containing shell metacharacters for exampl...

CVE-2026-101045

Fleet-maintained app install and uninstall scripts for macOS are vulnerable to OS command injection due to insufficient escaping of Homebrew cask metadata . In manifests generated before 2026-08-19 , certain interpolation sites failed to escape shell metacharacters (e.g., $(...)), allowing an att...

Exploit for CVE-2026-100382

CVE-2026-100382 - MediaWiki ExternalData extension OS command...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- 这是一个D-Link rce漏洞 检测程序 漏洞简介 D-Link DNS-320等都是中国友讯（D-Link）公司的一款NAS（网络附属存储）设备。 D-Link多款产品存在安全漏洞，该漏洞源于对参数name的错误操作会导致操作系统命令注入。以下产品及版本受到影响：D-Link DNS-320、DNS-320LW、DNS-325和DNS-340L 20241028版本及之前版本 网络测绘 app="DLink-DNS-ShareCenter"...

CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2026-101032

The navi tool (versions through 2.24.0 ) is vulnerable to OS Command Injection due to a failure to properly escape cheatsheet variable values during shell command substitution. An attacker can achieve arbitrary command execution with victim privileges by injecting shell metacharacters through cra...

CVE-2026-101032 navi through 2.24.0 OS Command Injection via Cheatsheet Variables

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Attackers can inject shell metacharacters through crafted file names in suggestion command directories to execute arbitrary commands with victim privileges...

CVE-2022-40635

CVE-2022-40635：CrafterCMS 中的 Groovy 沙箱绕过 Crafter CMS 的 Crafter Studio 中存在对动态管理代码资源的控制不当漏洞，允许经过身份验证的开发人员通过 Groovy 沙箱绕过执行操作系统命令。 厂商披露： 该漏洞的厂商披露和修复方案可在此处查看。 要求： 此漏洞需要： 有效的用户凭据 概念验证： 更多详细信息和利用过程可在此 PDF 中查看。...

CVE-2020-13159

CVE-2020-13159 - 在 Artica Proxy 4.30.000000 Community Edition 之前版本中存在多个操作系统命令注入漏洞 产品描述： Artica Tech 提供强大但易于使用的解决方案，这通常是大型和跨国公司的专属。Artica Proxy 的起价仅为 99 欧元，拥有超过 62,000 台活跃服务器，在过去 10 年中作为开源项目开发，帮助中小企业和公共机构以低成本保护其组织和员工免受网络威胁。 描述： 在 Artica Proxy 4.30.000000 Community Edition 之前版本中，攻击者可以通过 Netbios...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 描述了 Pardus 操作系统 My Computer 软件中的一个 OS 命令注入漏洞。该漏洞允许用户通过文件名参数注入系统命令，从而使攻击者能够在系统上执行恶意命令。 该漏洞存在于 Pardus My Computer 软件 0.7.2 版本之前的版本中。 漏洞所在函数 漏洞存在于 getfileinfo 函数中。该函数使用 subprocess 调用来获取用户提供的磁盘信息。然而，由于该调用中的文件路径参数（file）未经过正确验证，因此通过用户提供的磁盘名称导致了 OS 命令注入漏洞。 函数： def...

CVE-2025-11953-PoC

描述 Metro 开发服务器由 React Native Community CLI 启动，默认绑定到外部接口。该服务器暴露了一个存在操作系统命令注入漏洞的端点，这使得未经身份验证的网络攻击者可以向服务器发送 POST 请求并运行任意可执行文件。在 Windows 上，攻击者还可以使用完全受控的参数执行任意 shell 命令。 受影响版本 产品| 严重性| 受影响版本| 修复版本 ---|---|---|--- @react-native-community/cli| 严重 9.8| 4.8.0 - 20.0.0‑alpha.2| 20.0.0 用法 1. 安装依赖 npm instal...

CVE-2025-56803

CVE-2025-56803 Figma桌面应用程序中的插件执行OS命令注入漏洞 1. 概述 应用程序 ：Figma桌面应用程序 版本 ：125.6.5 供应商 ：Figma, Inc. CWE ：CWE-78：OS命令中特殊元素的不当中和（'OS命令注入'） CVSS ：8.4 向量字符串 ：CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 2. 摘要 Figma桌面应用程序（v125.6.5）在插件加载器中存在命令注入漏洞。...

cve-2019-15107-lab

CVE-2019-15107 – Laboratorio de RCE no autenticado en Webmin 1. Descripción general del proyecto Este proyecto demuestra CVE-2019-15107, una vulnerabilidad crítica de ejecución remota de código RCE en Webmin, dentro de un entorno Docker controlado y aislado. El laboratorio cubre el ciclo de vida...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 PAN-OS：GlobalProtect 中的操作系统命令注入漏洞 Pan-OS Checker 用于确定远程 GlobalProtect 门户或管理接口的 Palo Alto PAN-OS 软件版本。 运行脚本前，请确保 version-table.txt 位于同一目录下。 python3 panos-check.py -h -v -s -t TARGET...