CVE-2025-27804 OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations

Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions...

CVE-2024-42922

AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability...

CVE-2024-42922

AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability...

CVE-2024-42922: Improper Neutralization of Special Elements used in an OS Command

AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability...

CVE-2024-42922

AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability...

PT-2025-22332

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description There are several OS command injection vulnerabilities in the device firmware, specifically in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic...

PT-2025-22355

Name of the Vulnerable Software and Affected Versions AAPanel version 7.0.7 Description The issue is related to an OS command injection, which can lead to remote command execution RCE. It is estimated that more than 3.6 million servers globally are potentially affected. Recommendations For AAPane...

CVE-2024-42922

AAPanel v7.0.7 is susceptible to an OS command injection vulnerability, which can lead to remote command execution (RCE) . This issue is estimated to affect more than 3.6 million servers globally. While the vulnerability is documented, there is currently no information regarding a newer version t...

Ackites KillWxapkg vulnerable to OS Command Injection

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

CVE-2025-5030: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection. The attack can be initiated...

PT-2025-22398

Name of the Vulnerable Software and Affected Versions Ackites KillWxapkg versions up to 2.4.1 Description A critical issue affects the processFile function of the wxapkg File Parser component, located in the file internal/unpack/unpack.go. This issue leads to os command injection and can be...

CVE-2025-27804: Improper Neutralization of Special Elements used in an OS Command

Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions...

CVE-2025-41225: Improper Neutralization of Special Elements used in an OS Command

The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script action may exploit this issue to run arbitrary commands on the vCenter Server...

CVE-2024-6486

The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "clipath" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code...

CVE-2025-32002

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitra...

CVE-2025-43562

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could...

CVE-2024-6486

The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "clipath" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code...

CVE-2024-6486 ImageMagick Engine < 1.7.11 - Administrator+ OS Command Injection

The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "clipath" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code...

CVE-2024-6486 ImageMagick Engine < 1.7.11 - Administrator+ OS Command Injection

The ImageMagick Engine ImageMagick Engine WordPress plugin before 1.7.11 for WordPress is vulnerable to OS Command Injection via the "clipath" parameter. This allows authenticated attackers, with administrator-level permission to execute arbitrary OS commands on the server leading to remote code...

CVE-2024-6486

The ImageMagick Engine WordPress plugin is vulnerable to OS Command Injection in versions prior to 1.7.11 . The vulnerability exists due to improper neutralization of special elements in the cli_path parameter. This allows authenticated attackers with administrator-level permissions to execute ar...