Lucene search
+L

13511 matches found

Cvelist
Cvelist
•added 2026/09/04 7:48 p.m.•45 views

CVE-2026-53932 wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injection')

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4...

8CVSS0.01679EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/04 7:48 p.m.•7 views

CVE-2026-53932 wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injection')

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4...

8CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/04 7:48 p.m.•17 views

EUVD-2026-71722

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4...

8CVSS5.2AI score0.01679EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/04 7:17 p.m.•9 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

9.1CVSS0.01551EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 6:14 p.m.•72 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

9.1CVSS6.2AI score0.01551EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 6:14 p.m.•11 views

EUVD-2026-71679

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

9.1CVSS6.2AI score0.01551EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 6:14 p.m.•39 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

0.01551EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 6:14 p.m.•13 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

6.2AI score0.01551EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 5:33 p.m.•14 views

CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

8.5CVSS5.8AI score0.01081EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/04 5:33 p.m.•16 views

EUVD-2026-71619

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

8.5CVSS5.8AI score0.01081EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/04 5:33 p.m.•41 views

CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

8.5CVSS0.01081EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/04 5:33 p.m.•49 views

CVE-2026-85656

CVE-2026-85656 is an OS command injection vulnerability in the log4j-cve-2021-44228-hotpatch package in Amazon Linux versions before 1.3-9 . A local user with low privileges can execute arbitrary commands with root privileges by leveraging embedded newline characters in a Java process's executabl...

8.5CVSS5.8AI score0.01081EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/04 5:16 p.m.•8 views

CVE-2026-17499

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

7.8CVSS0.00123EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/04 5:16 p.m.•10 views

CVE-2026-16826

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

7.8CVSS0.00134EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 4:41 p.m.•10 views

EUVD-2026-71485

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

5.3CVSS5.8AI score0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 4:41 p.m.•33 views

CVE-2026-16826

CVE-2026-16826 affects the Debug Server component of IBM i versions 7.3, 7.4, 7.5, and 7.6. The root cause is CWE-78 (OS Command Injection) : improper neutralization of special elements used in an OS command, allowing a local attacker with low privileges to execute arbitrary commands . NVD scores...

7.8CVSS5.8AI score0.00134EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/04 4:41 p.m.•41 views

CVE-2026-16826 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

5.3CVSS0.00134EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 4:31 p.m.•12 views

EUVD-2026-71467

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

4.4CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 4:31 p.m.•13 views

CVE-2026-17499 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

4.4CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 4:31 p.m.•37 views

CVE-2026-17499 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

4.4CVSS0.00123EPSS
SaveExploits0References1
Rows per page
Query Builder