14716 matches found
EUVD-2026-85618
OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges...
OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting
Summary An authenticated user can execute arbitrary operating system commands on the openc3-cosmos-cmd-tlm-api service. The pypiurl setting is interpolated, unescaped, into a command line that is run through a shell backtick when a plugin is installed. Shell metacharacters in the setting value ar...
CVE-2026-77601 OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.12.0 until 7.3.0, an authenticated actor can write the pypiurl setting through setsetting at POST /openc3-api/api, then cause OpenC3::PluginModel.installphase2 in...
CVE-2026-93349
Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...
CVE-2026-93349 Frictionless OS Command Injection via explore Console Command
Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...
CVE-2026-93349
Frictionless versions through 5.20.0rc1 are vulnerable to an OS command injection in the explore console command. The root cause is the unsanitized passing of resource path values from a datapackage.json descriptor to os.system via a shell. An attacker can supply a crafted descriptor containing s...
CVE-2026-93349 Frictionless OS Command Injection via explore Console Command
Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...
CVE-2026-93349 Frictionless OS Command Injection via explore Console Command
Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...
CVE-2026-79310
webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...
CVE-2019-9193-Home-Lab
CVE-2019-9193 — PostgreSQL の COPY FROM PROGRAM による RCE このラボは、PostgreSQL 9.3〜11.2 に存在する脆弱性 CVE-2019-9193 を再現します。superuser または pgexecuteserverprogram ロールを持つユーザーが実行すると、次のコマンドで OS コマンドを実行できます: root@kitploit: COPY ... FROM PROGRAM '' このラボの課題は、この機能を悪用して次のファイルを読み取ることです: root@kitploit: /tmp/flag.txt 目的 1...
CVE-2026-35196
CVE-2026-35196 · Chamilo LMS · OSコマンドインジェクション → RCE 研究者: K 開示タイプ: 責任ある開示 ステータス: 修正済み 影響を受ける製品: Chamilo LMS 2.0 v1.11.32 で確認...
CVE-2026-15027
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer...
CVE-2026-15027 Changing｜CGServiSign - OS Command Injection
CGServiSign developed by Changing has a OS Command Injection vulnerability. Unauthenticated remote attackers can induce victims to visit a malicious web page and inject arbitrary OS commands through the local service interface, resulting in command execution on the victim's local computer...
CVE-2026-15027
The CGServiSign software developed by Changing contains an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this by inducing victims to visit a malicious web page, which then triggers the injection of arbitrary OS commands through the local service interface . This...
Simulation_CVE-2024-46256
CVE-2024-46256 & CVE-2024-46257 – PoCシミュレーション 概要 このリポジトリには、Nginx Proxy Managerにおける2つの脆弱性をシミュレートする、画像付きのステップバイステップのProof of Concept（PoC）が含まれています。これらの脆弱性はOSコマンドインジェクションを可能にし、認証後にリモートコード実行（RCE）に至ります。 影響を受ける製品: Nginx Proxy Manager 影響を受けるバージョン: v2.11.3 影響: 認証後のRCE（PoCではroot権限で確認） 内容 POC.md:...
EUVD-2026-84985
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...
EUVD-2026-84977
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-84973
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
EUVD-2026-84972
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...