Lucene search
+L

16634 matches found

Vulnrichment
Vulnrichment
•added 2026/09/22 5:51 p.m.•11 views

CVE-2026-43641 Softaculous Virtualizor OS Command Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by bypassing authentication through specific parameter combinations. Attackers can...

9.8CVSS6.7AI score0.03026EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 5:51 p.m.•10 views

EUVD-2026-84620

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by bypassing authentication through specific parameter combinations. Attackers can...

9.8CVSS6.7AI score0.03026EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/22 5:51 p.m.•26 views

CVE-2026-43641

Softaculous Virtualizor versions before 3.2.9 (Patch 9) and 3.0.0 are vulnerable to an OS command injection in the billing module handler. Unauthenticated remote attackers can bypass authentication using specific parameter combinations to deserialize a crafted billing_data POST field. The uid fie...

9.8CVSS6.7AI score0.03026EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/22 5:51 p.m.•42 views

CVE-2026-43641 Softaculous Virtualizor OS Command Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by bypassing authentication through specific parameter combinations. Attackers can...

9.8CVSS0.03026EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2026/09/22 4:33 p.m.•16 views

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

CVE-2011-2523 — vsftpd 2.3.4 Backdoor Exploit !Pythonhttps...

10CVSS8AI score0.96184EPSS
SaveExploits58
CVE
CVE
•added 2026/09/22 3:21 p.m.•24 views

CVE-2026-80151

Lantronix Autonomous Out-of-Band Devices (SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02) are affected by an OS command injection in the set nfs download command, which passes unsanitized user input to a system() call. Authen...

9.4CVSS6.6AI score0.01658EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/22 3:17 p.m.•11 views

CVE-2026-65130

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

9.8CVSS0.01624EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/22 2:10 p.m.•14 views

CVE-2026-65130

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

8CVSS5.9AI score0.01624EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 2:10 p.m.•15 views

EUVD-2026-84416

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

8CVSS5.9AI score0.01624EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/22 12:16 a.m.•13 views

CVE-2026-94490

A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...

5.8CVSS0.02097EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/22 12:00 a.m.•9 views

EUVD-2026-84249

A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...

5.8CVSS5.4AI score0.02097EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/22 12:00 a.m.•45 views

CVE-2026-94490 OctoPrint Command API system.py executeSystemCommand os command injection

A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...

5.8CVSS0.02097EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/22 12:00 a.m.•10 views

CVE-2026-94490 OctoPrint Command API system.py executeSystemCommand os command injection

A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...

5.8CVSS5.4AI score0.02097EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/22 12:00 a.m.•50 views

CVE-2026-94490

CVE-2026-94490 affects OctoPrint 1.0.0 , specifically the executeSystemCommand function in src/octoprint/server/api/system.py (the Command API component). The vulnerability is an OS command injection triggered by manipulating the command argument. The attack can be initiated remotely but requires...

5.8CVSS5.4AI score0.02097EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•9 views

CVE-2026-16346: Improper Authorization

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

9.9CVSS6.6AI score0.00453EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•3 views

PT-2026-97064

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to...

9.9CVSS6.4AI score0.00453EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•8 views

CVE-2026-16468: Improper Neutralization of Special Elements used in an OS Command

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection...

8.8CVSS6.7AI score0.01709EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•7 views

CVE-2026-65130: Improper Neutralization of Special Elements used in an OS Command

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

9.8CVSS5.9AI score0.01624EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•7 views

CVE-2026-95660: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command injection. The attack may be launched...

7.5CVSS6.1AI score0.01665EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•5 views

PT-2026-97069

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to...

8.8CVSS6.4AI score0.00576EPSS
SaveExploits0References5
Rows per page
Query Builder