CVE-2026-1428

CVE-2026-1428 concerns WellChoose’s Single Sign-On Portal System. The connected documents describe an OS Command Injection vulnerability that allows authenticated remote attackers to inject arbitrary OS commands and execute them on the server. The advisories do not publicly provide exact affected...

EUVD-2026-4707

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

WellChoose Single Sign-On Portal System: Operating System Command Injection Vulnerability

WellChoose Single Sign-On Portal System is a single-sign-on portal system developed by WellChoose in Taiwan, China. The WellChoose Single Sign-On Portal System has a vulnerability related to operating system command injection. This vulnerability stems from the presence of OS command injection,...

Apple Security Update: iOS 26.2.1 and iPadOS 26.2.1

Apple recommends to install security update iOS 26.2.1 and iPadOS 26.2.1 on devices iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later...

macOS Mavericks 10.9 Local Privilege Escalation Tooling

This is not an exploit but rather a theoretical ROP chain construction framework for macOS Mavericks 10.9 that is inspired by older research...

Important Photon OS Security Update - PHSA-2026-5.0-91-0745

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

CVE-2025-67264

An OS command injection vulnerability exists in the com.sprd.engineermode component on Doogee Note59 , Note59 Pro , and Note59 Pro+ smartphones. This flaw allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell . The root cause is attributed to the...

PT-2026-4525

Name of the Vulnerable Software and Affected Versions Doogee Note59 Doogee Note59 Pro Doogee Note59 Pro+ affected versions not specified Description A flaw exists within the com.sprd.engineermode component that could allow a local attacker to execute arbitrary code and escalate privileges. This i...

CVE-2025-67264

An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710...

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

ALGO 8180 IP Audio Alerter: Operating System Command Injection Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation for user input strings in the web-based interface, which may lead to...

MCP Manager for Claude Desktop: Operating System Command Injection Vulnerability

MCP Manager for Claude Desktop is a context-based protocol management software developed by zue’s individual developers. MCP Manager for Claude Desktop has a vulnerability related to operating system command injection. This vulnerability arises from the lack of validation of the strings provided ...

GitHub Kanban MCP Server: Operating System Command Injection Vulnerability

GitHub Kanban MCP Server is an application developed by Maki, a personal developer. The GitHub Kanban MCP Server has a vulnerability related to operating system command injection. This vulnerability arises from executing system calls without validating user input when processing the createissue...

Mellanox Ethernet adapter driver Net/mlx5e DoS

The vulnerability of the net/mlx5e driver for Mellanox Ethernet adapter devices in Linux operating systems relates to the reutilization of previously released memory. Exploiting this vulnerability can allow attackers to cause service failures...

Pi-hole Command Injection Code Execution

The vulnerability of the Pi-hole ad-blocking application is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Android WifiScanModeActivity Privilege Escalation

The vulnerability of the WifiScanModeActivity.java file in the Android operating system is related to the lack of authentication. Exploiting this vulnerability can allow a hacker to gain increased privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-1299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The email module, specifically the BytesGenerator class, didn't properly quote newlines for email headers when serializing an email message allowing for header...

Exploit for Code Injection in Lubus Wp_Query_Console

CVE-2024-50498 / 0-Click RCE Exploit - Author: Joshua Provost...

CVE-2021-47853

phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query manipulation. Attackers can create a custom table, upload a malicious .txt file, and use the COPY FROM PROGRAM command to execute operatin...