CVE-2026-93533 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

CVE-2025-14754 IBM Cloud Pak for Data is vulnerable to OS command injection

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

CVE-2025-14754 IBM Cloud Pak for Data is vulnerable to OS command injection

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

CVE-2025-14754

IBM Cloud Pak for Data 5.1.2 is vulnerable to OS command injection (CWE-78) due to improper validation of user-supplied input. An authenticated remote attacker can exploit this to execute arbitrary commands with elevated privileges, potentially leading to full system compromise. The CVSS 3.1 base...

CVE-2026-81942 PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-81942

The PLANET IGS-5225-8P2T4S industrial managed switch (V1 and V2) contains an OS command injection vulnerability in its web server . User-supplied input is passed to system() without sufficient filtering, enabling a remote authenticated attacker to execute arbitrary commands on the underlying OS a...

EUVD-2026-82987

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-81942 PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

OS Command Injection

@cyclonedx/cyclonedx-npm is vulnerable to OS Command Injection. The vulnerability is due to improper sanitization of the untrusted --workspace value when constructing a Windows shell command, which allows an attacker to inject shell metacharacters and execute arbitrary operating-system commands...

VulnCheck KEV: CVE-2023-46359

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature...

PT-2026-95720

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.5 Description The software renders notebook names as raw HTML in the Daily Note picker dialog without proper escaping. This leads to stored cross-site scripting XSS within the Electron renderer. An attacker can...

PT-2026-95676

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An OS command injection flaw exists in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a...

PT-2026-95667

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an OS command allows a remote attacker to execute arbitrary commands on the system. Recommendations Isolate exposed instances of IBM...

PT-2026-95633

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists where a remote authenticated attacker can execute arbitrary commands. This occurs due to improper neutralization of special elements used in an OS command, which allows the...

PT-2026-95508

Name of the Vulnerable Software and Affected Versions spatie Scotty versions prior to 1.4.5 Description OS command injection is possible via remote attack in the Doctor Command Handler component. The issue exists within the DoctorCommand::checkSshConnectivity and DoctorCommand::checkRemoteTools...

PT-2026-95622

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated OS command injection flaw exists in the exportCertificate functionality. This issue allows an attacker to execute unauthorized commands on the system, potentially...

CVE-2026-61817: Improper Neutralization of Special Elements used in an SQL Command

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...

CVE-2026-84071: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...

CVE-2026-84085: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...

CVE-2026-82892: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...