28151 matches found
CVE-2026-7096 Tenda HG3 formgponConf os command injection
A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgponloid results in os command injection. It is possible to launch the attack remotely. The exploit has...
CVE-2026-33277
An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...
CVE-2026-33277
An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...
CVE-2026-33277
An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user...
PT-2026-35417
A vulnerability was found in Totolink A8000RU 7.1cu.643 b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection. The attack can be initiated remotely. The...
Critical Photon OS Security Update - PHSA-2026-5.0-0833
Updates of 'mesa' packages of Photon OS have been released...
Juniper Junos OS Vulnerability (JSA75730)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75730 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon jdhcpd of Juniper Networks Junos OS allows an adjacent, unauthenticated attack...
Simple-Ostack-MCP command injection vulnerability
simple-openstack-mcp is an OpenStack command execution tool based on MCP developed by choieastsea. simple-openstack-mcp has a command injection vulnerability, which stems from the execopenstack function in the server.py file. This vulnerability may lead to OS command injections...
PT-2026-35521
A security flaw has been discovered in Totolink A8000RU 7.1cu.643 b20200521. The impacted element is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sys info results in os command injection. The attack can...
Critical Photon OS Security Update - PHSA-2026-5.0-91-0833
Updates of 'mesa' packages of Photon OS have been released...
Linux free_netdev Heap Buffer Overflow DoS
The vulnerability of the freenetdev function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
ext4 kernel DoS
The vulnerability of the ext4 kernel component in Linux operating systems is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
Juniper Junos OS Vulnerability (JSA75734)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75734 advisory. - An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based,...
CVE-2026-7064
A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0. This issue affects some unknown processing of the file browser-tools-server/browser-connector.ts. Executing a manipulation can lead to os command injection. The attack may be performed from remote. The exploit has been published...
CVE-2026-7062 Intina47 context-sync Git Integration git-integration.ts os command injection
A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affects an unknown part of the file src/git-integration.ts of the component Git Integration. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...
CVE-2026-7061 Toowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection
A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by this issue is some unknown functionality of the file src/services/docker.service.ts of the component MCP/HTTP. This manipulation causes os command injection. Remote exploitation of the attack is possible. The...
ChatGPT MCP Server command injection vulnerability
The ChatGPT MCP Server is a MCP server managed through natural language by Toowiredd’s individual developer. Versions of the ChatGPT MCP Server 0.1.0 and earlier had a command injection vulnerability, which stemmed from the os command injection present in the src/services/docker.service.ts file...
PT-2026-35271
Name of the Vulnerable Software and Affected Versions AgentDeskAI browser-tools-mcp versions prior to 1.2.1 Description An issue exists in the processing of the file browser-tools-server/browser-connector.ts that allows a remote attacker to perform OS command injection, which is the execution of...
PT-2026-35268
Name of the Vulnerable Software and Affected Versions Toowiredd chatgpt-mcp-server versions prior to 0.1.1 Description An OS command injection flaw exists in the MCP/HTTP component within the src/services/docker.service.ts file. This allows remote attackers to execute arbitrary operating system...
