14078 matches found
EUVD-2026-94119
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-102160
An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...
CVE-2026-102160 Security Advisory 0190
An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...
EUVD-2026-93957
An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...
CVE-2026-102160 Security Advisory 0190
An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...
CVE-2026-102160
An OS command injection vulnerability exists in CloudVision CUE backup management . This flaw allows an authenticated Super User to submit a crafted backup request to execute arbitrary commands with the privileges of the affected service. The vulnerability is associated with CWE-78 (Improper Neut...
CVE-2026-48030
CVE-2026-48030 — Внедрение команд ОС в Pheditor Обзор Поле| Сведения ---|--- CVE ID| CVE-2026-48030 Продукт| pheditor Разработчик| Hamid Samak Затронутые версии| 2.0.1, 2.0.2, 2.0.3 Исправленная версия| 2.0.4 Критичность| Критическая Оценка CVSS| 9.9 Вектор CVSS|...
CVE-2022-30525
CVE-2022-30525 Уязвимость внедрения команд ОС в программу CGI Zyxel Краткое описание Уязвимость, впервые обнаруженная 13 апреля 2022 года, приводила к удаленному выполнению кода в продуктах брандмауэра Zyxel. Эта важная уязвимость с оценкой CVSS 9.8 была заблокирована обновлением, выпущенным Zyxe...
CVE-2026-101207
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
EUVD-2026-93575
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
CVE-2026-101207
Dell OpenManage Integration with Microsoft Windows Admin Center (versions prior to 3.7.0 ) is vulnerable to an OS Command Injection vulnerability (CWE-78). A low-privileged attacker with remote access could exploit this flaw to achieve Remote Execution , potentially gaining SYSTEM privileges on t...
CVE-2026-101207
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
CVE-2022-30525_Exploit
CVE-2022-30525 Удаленное выполнение команд на межсетевых экранах Zyxel Эксплойт на Python для CVE-2022-30525 Сводка уязвимости NIST Уязвимость внедрения команд ОС в программе CGI межсетевых экранов Zyxel USG FLEX 100W с версиями прошивки от 5.00 до 5.21 Patch 1 включительно, USG FLEX 200 с версия...
CVE-2022-30525_check
CVE-2022-30525check Описание: Данный скрипт проверяет наличие уязвимости внедрения команд ОС CVE-2022-30525 в устройствах Zyxel USG FLEX под управлением версий прошивки с 5.00 по 5.21 Patch 1. Уязвимость позволяет злоумышленнику изменять определённые файлы и выполнять команды ОС на уязвимом...
Vulnerability-CVE-2025-64446-CVE-2025-58034
Имитация эксплуатации FortiWeb CVE-2025-64446 & CVE-2025-58034 Примечание: Данный документ предназначен только для целей обучения и исследований в области безопасности. Не используйте его для атаки на системы без соответствующего разрешения. 1. Обзор FortiWeb — это устройство Web Application...
CVE-2026-91140
An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version 2.0 allows an attacker who supplies a crafted Swagger/OpenAPI document to execute arbitrary commands on a developer's...
CVE-2026-85523
Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection. This issue affects SambaBox: before 5.4.1...
CVE-2026-34498
Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...
CVE-2026-105841
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...
cve-2017-12945
CVE-2017-12945 Эксплойт для CVE-2017-12945 Уязвимость удалённого аутентифицированного слепого внедрения команд ОС существует в Mersive Solstice Pods — беспроводной платформе для совместной работы и презентаций, разработанной Mersive Technologies Inc. — работающих на версиях прошивки до 2.8.4, как...