Lucene search
+L

13510 matches found

OSV
OSV
•added 2026/09/04 7:48 p.m.•7 views

CVE-2026-53932 wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injection')

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4...

8CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/04 7:48 p.m.•17 views

EUVD-2026-71722

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4...

8CVSS5.2AI score0.01679EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/04 7:17 p.m.•9 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

9.1CVSS0.01551EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 6:14 p.m.•72 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

9.1CVSS6.2AI score0.01551EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 6:14 p.m.•11 views

EUVD-2026-71679

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

9.1CVSS6.2AI score0.01551EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 6:14 p.m.•39 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

0.01551EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 6:14 p.m.•13 views

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows an authenticated attacker with SuperAdmin privileges to inject arbitrary commands that are executed on the...

6.2AI score0.01551EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 5:33 p.m.•14 views

CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

8.5CVSS5.8AI score0.01081EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/04 5:33 p.m.•16 views

EUVD-2026-71619

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

8.5CVSS5.8AI score0.01081EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/04 5:33 p.m.•41 views

CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...

8.5CVSS0.01081EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/04 5:33 p.m.•49 views

CVE-2026-85656

CVE-2026-85656 is an OS command injection vulnerability in the log4j-cve-2021-44228-hotpatch package in Amazon Linux versions before 1.3-9 . A local user with low privileges can execute arbitrary commands with root privileges by leveraging embedded newline characters in a Java process's executabl...

8.5CVSS5.8AI score0.01081EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/04 5:16 p.m.•8 views

CVE-2026-17499

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

7.8CVSS0.00123EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/04 5:16 p.m.•10 views

CVE-2026-16826

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

7.8CVSS0.00134EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 4:41 p.m.•10 views

EUVD-2026-71485

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

5.3CVSS5.8AI score0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 4:41 p.m.•33 views

CVE-2026-16826

CVE-2026-16826 affects the Debug Server component of IBM i versions 7.3, 7.4, 7.5, and 7.6. The root cause is CWE-78 (OS Command Injection) : improper neutralization of special elements used in an OS command, allowing a local attacker with low privileges to execute arbitrary commands . NVD scores...

7.8CVSS5.8AI score0.00134EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/04 4:41 p.m.•41 views

CVE-2026-16826 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

5.3CVSS0.00134EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 4:31 p.m.•12 views

EUVD-2026-71467

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

4.4CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 4:31 p.m.•13 views

CVE-2026-17499 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

4.4CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 4:31 p.m.•37 views

CVE-2026-17499 IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

4.4CVSS0.00123EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/04 3:17 p.m.•11 views

CVE-2026-85696

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execut...

9.8CVSS0.02574EPSS
SaveExploits0References4
Rows per page
Query Builder