CVE-2026-109122

The Kiloview E3 NDI encoder firmware contains an OS Command Injection vulnerability in its network management service. The service fails to properly sanitize a field used when configuring static routes via the web management API. An authenticated web user with permission to configure static route...

CVE-2026-95705

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying...

CVE-2026-115414

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

CVE-2026-115414

A vulnerability in the Terraform hook of the AWS SAM CLI (versions before 1.166.2 ) allows for OS command injection . An actor capable of influencing the Terraform configuration or plan file used during a build can execute arbitrary commands as the build user on the host system by providing a cra...

CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

EUVD-2026-108281

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

CVE-2019-9193-Home-Lab

ENGLISH BELOW CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Lab นี้จำลองช่องโหว่ CVE-2019-9193 ที่เกิดใน PostgreSQL เวอร์ชัน 9.3 - 11.2 ซึ่งเปิดให้ user ที่เป็น superuser หรือมี role pgexecuteserverprogram สามารถใช้คำสั่ง: COPY ... FROM PROGRAM '' เพื่อรันคำสั่ง OS ได้โดยตรง ส่งผลให้เกิด Remot...

rConfig <= 3.9.4 - Authenticated OS Command Injection

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.9.4 does not properly sanitize the fileName POST parameter before using it in a shell command, allowing an authenticated attacker to inject arbitrary OS commands. This template uses default admin credentials to log in before triggering the...

CVE-2021-27928

CVE-2021-27928 In this repository, you will find a proof of concept of the exploitation of the CVE-2021-27928 flaw through a docker container. Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before...

CVE-2026-96376

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

D-Link - Unauthenticated Remote Code Execution

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

Wavlink WN535K2/WN535K3 - OS Command Injection

Wavlink WN535K2 and WN535K3 routers are susceptible to OS command injection which affects unknown code in /cgi-bin/nightled.cgi via manipulation of the argument starthour. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised syste...

HuangDou UTCMS V9 - OS Command Injection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

Zyxel Firewall - OS Command Injection

An OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1...

CVE-2026-96376

The Drupal Cloud module (versions 0.0.0 to 7.0.1 ) is vulnerable to OS Command Injection due to insufficient sanitization of user-controlled Git branch and repository URL values. These values are passed to shell commands within the Kubernetes integration , potentially allowing an attacker to exec...

CVE-2026-96376 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

CVE-2026-96376 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

EUVD-2026-107824

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...