16381 matches found
CVE-2026-71908 DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test
Multiple DrayTek VigorAP models contain a command injection vulnerability in the meshstartspeedtest function. The vulnerability is caused by insufficient sanitization of the meshdeviceindex and meshdeviceip fields before command execution. A remote attacker can trigger this vulnerability via...
CVE-2026-71905 DrayTek VigorAP Multiple Models OS Command Injection via ExportSettings
Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...
CVE-2026-71906 DrayTek VigorAP Multiple Models OS Command Injection via setLan
Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...
CVE-2026-71905 DrayTek VigorAP Multiple Models OS Command Injection via ExportSettings
Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...
CVE-2026-71904 DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform
Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the eventcode field is concatenated into a system command. A remote attacker can trigger this vulnerabili...
CVE-2026-76055
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
CVE-2026-76055
CVE-2026-76055 is an OS command injection in the package manager component of Black Duck blackduck-c-cpp prior to version 3.0.7. Filesystem paths encountered while traversing a scanned build directory are interpolated into shell command strings without quoting or escaping , allowing shell metacha...
EUVD-2026-64896
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
CVE-2026-76055
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
CVE-2026-76055
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
CVE-2026-62982
A flaw was found in Glances, an open-source system monitoring tool. The sanitizemustachedict function in glances/actions.py did not properly sanitize nested list and dictionary strings, specifically process command-line values. This allowed pipe characters to bypass the sanitization process and b...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...
Exploit for OS Command Injection in Tenable Security_Center
C...
Sakura Editor vulnerable to OS command injection
Overview Sakura Editor provided by Sakura Editor Development Community has a functionality "Open Terminal". It does not neutralize the string which represents the current directory the directory where the editing file is located. OS command injection CWE-78 - CVE-2026-59561 Impact If a victim use...
CVE-2026-59561
Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...
CVE-2026-59561
Sakura Editor , a text editor developed by the Sakura Editor Development Community, is affected by an OS command injection vulnerability. When a user is directed to edit a file located in a crafted directory and subsequently invokes the "Open Terminal" feature, an attacker may achieve arbitrary O...
CVE-2026-59561
Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...
CVE-2026-59561
Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...
CVE-2026-59561
Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...
CVE-2026-78211
4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...