CVE-2025-10680: Improper Neutralization of Special Elements used in an OS Command

OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...

CVE-2024-58274: Improper Neutralization of Special Elements used in an OS Command

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

CVE-2025-47901

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-6542

CVE-2025-6542 affects TP-Link Omada Gateway devices and is described as an OS command injection vulnerability that can be triggered by a remote unauthenticated attacker via multiple parameters and the web management interface. The connected coverage confirms this is a remote code execution vector...

CVE-2025-6541 OS command injection using information obtained from the web management interface

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

CVE-2025-6541: Improper Neutralization of Special Elements used in an OS Command

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

CVE-2025-6542: Improper Neutralization of Special Elements used in an OS Command

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

CVE-2025-47900

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47901

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47901 RCE on restore configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47900 RCE on backup configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47900

CVE-2025-47900 is an OS command injection in Microchip Time Provider 4100 prior to version 2.5 . Root cause: improper neutralization of special elements used in OS commands. Impact: potential remote command execution with high severity; affected product is Time Provider 4100. Remediation: upgrade...

CVE-2025-47901: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

PT-2025-42796

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5 Description An improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Microchip Time Provider 4100. This allows for OS Command Injection. The...

CVE-2025-47900: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

PT-2025-42791

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5 Description An improper neutralization of special elements used in an OS command vulnerability exists in Microchip Time Provider 4100, allowing for OS command injection. This issue relates to...

CVE-2025-11900

CVE-2025-11900 affects HGiga’s iSherlock product family and is caused by an OS Command Injection in unauthenticated remote input handling. Multiple connected sources (Red Hat, NVD, CVE lists, EUVD/ ENISA) corroborate the issue description and classify it as CRITICAL (CVSS v3.1: 9.8; CVSS v4.0: 9....

CVE-2025-11900: Improper Neutralization of Special Elements used in an OS Command

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server...

PT-2025-42578

Name of the Vulnerable Software and Affected Versions HGiga iSherlock version 4.5 Description The iSherlock software contains an OS Command Injection flaw. This allows unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. Successful exploitation could le...

CVE-2025-34514

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scripts that call exec and allow an authenticated attacker to execute arbitrary commands. Ilevia has declined to service this vulnerability, and...