CVE-Requests-1896609

CVE Requests 1896609 - feiskyer/mcp-kubernetes-server Краткое изложение В этом отчете подробно описываются две критические уязвимости безопасности, обнаруженные в пакете feiskyer/mcp-kubernetes-server. При развертывании сервер предоставляет инструмент MCP с именем kubectl, который предназначен дл...

CVE-2022-31499

CVE-2022-31499 Titre de l'exploit : Nortek Linear eMerge E3-Series - Injection de commandes OS aveugle...

CVE-2025-56803

CVE-2025-56803 Уязвимость внедрения команд ОС через выполнение плагина в настольном приложении Figma 1. Обзор Приложение : Figma Desktop Application Версия : 125.6.5 Разработчик : Figma, Inc. CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - Внедрение команд ОС root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...

CVE-2021-22123

CVE-2021-22123 Fortinet FortiWeb 인증된 OS 명령 주입 Hit Counter FortiWeb 관리 인터페이스의 명령 주입 취약점으로 인해 인증된 원격 공격자가 SAML 서버 구성 페이지를 통해 시스템에서 임의의 명령을 실행할 수 있습니다. 최대 권한으로 명령을 실행하면 공격자가 서버를 완전히 제어할 수 있게 됩니다. 이는 CWE-78: OS 명령에 사용되는 특수 요소의 부적절한 중화에 해당하며 CVSSv3 기본 점수는 8.7입니다. 이 취약점은 CVE-2021-22123 번호로 Fortiguard L...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58567

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

EUVD-2026-69302

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-13336

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

EUVD-2026-69149

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58571

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

CVE-2025-69212-PoC

CVE-2025-69212 - Preuve de concept d'injection de commandes OS dans OpenSTAManager Utilisation Installer les dépendances : root@kitploit: pip install -r requirements.txt Exécuter une commande unique et afficher sa sortie : root@kitploit: python3 cve-2025-69212poc.py -u http://target.com -U admin ...

CVE-2026-13336

CVE-2026-13336 is a CWE-78 (OS Command Injection) vulnerability identified by Schneider Electric (advisory SEVD-2026-223-02). The flaw allows execution of Linux operating system commands when a maliciously modified system backup is restored. The CVSS 4.0 score is 7.3 (HIGH) , with an adjacent net...

EUVD-2026-69132

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

CVE-2026-13336

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

CVE-2026-67599_ClearOS_RCE

Инъекция команд ОС в параметр фильтра Log Viewer Пакет: ClearFoundation Протестированные версии: ClearOS 7.9.1.342252 Тип уязвимости: OS Command Injection CWE-78 Серьёзность: Высокая CVE : CVE-2026-67599 Вектор CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Оценка: 7.2 Спасибо VulnCheck ...

EUVD-2026-69031

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...