CVE-2025-12296: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be...

CVE-2025-60803: Improper Neutralization of Special Elements used in an OS Command

Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution RCE vulnerability via the component /api/aaa;/../register...

CVE-2025-10680: Improper Neutralization of Special Elements used in an OS Command

OpenVPN 2.7alpha1 through 2.7beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use...

CVE-2024-58274: Improper Neutralization of Special Elements used in an OS Command

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

CVE-2025-47901

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-6542

CVE-2025-6542 affects TP-Link Omada Gateway devices and is described as an OS command injection vulnerability that can be triggered by a remote unauthenticated attacker via multiple parameters and the web management interface. The connected coverage confirms this is a remote code execution vector...

CVE-2025-6541 OS command injection using information obtained from the web management interface

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

CVE-2025-6542: Improper Neutralization of Special Elements used in an OS Command

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...

PT-2025-42824

Name of the Vulnerable Software and Affected Versions Omada gateways affected versions not specified Description A command injection issue exists that may be triggered following administrative authentication on the web portal of Omada gateways. The issue allows for potential unauthorized executio...

CVE-2025-6541: Improper Neutralization of Special Elements used in an OS Command

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...

CVE-2025-47901

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47900

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47901 RCE on restore configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47900

CVE-2025-47900 is an OS command injection in Microchip Time Provider 4100 prior to version 2.5 . Root cause: improper neutralization of special elements used in OS commands. Impact: potential remote command execution with high severity; affected product is Time Provider 4100. Remediation: upgrade...

CVE-2025-47900 RCE on backup configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-62577: Incorrect Default Permissions

ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges...

PT-2025-42791

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5 Description An improper neutralization of special elements used in an OS command vulnerability exists in Microchip Time Provider 4100, allowing for OS command injection. This issue relates to...

PT-2025-42796

Name of the Vulnerable Software and Affected Versions Microchip Time Provider 4100 versions prior to 2.5 Description An improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Microchip Time Provider 4100. This allows for OS Command Injection. The...

CVE-2025-47900: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

CVE-2025-47901: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...