Lucene search
+L

54 matches found

NVD
NVD
•added 2026/10/06 2:17 p.m.•9 views

CVE-2026-85523

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection. This issue affects SambaBox: before 5.4.1...

8.8CVSS0.00906EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 1:55 p.m.•7 views

EUVD-2026-93399

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection. This issue affects SambaBox: before 5.4.1...

8.8CVSS5.9AI score0.00906EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 1:55 p.m.•33 views

CVE-2026-85523 OS Command Injection in Felisify Informatics' SambaBox

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection. This issue affects SambaBox: before 5.4.1...

8.8CVSS0.00906EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 1:55 p.m.•13 views

CVE-2026-85523

SambaBox by Felisify Information Technologies Industry and Trade Inc. is vulnerable to OS Command Injection due to the improper neutralization of special elements used in an OS command (CWE-78 ). This issue affects versions before 5.4.1 . An attacker could potentially execute arbitrary commands o...

8.8CVSS5.9AI score0.00906EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•6 views

PT-2026-106747

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allows OS Command Injection. This issue affects SambaBox: before 5.4.1...

8.8CVSS5.9AI score0.00906EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:21 p.m.•21 views

CVE-2026-3120

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

7.2CVSS5.5AI score0.01673EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/04 12:16 p.m.•28 views

CVE-2026-3120

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

7.2CVSS0.01673EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/04 11:53 a.m.•73 views

CVE-2026-3120 RCE in Profelis Informatics' SambaBox

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

7.2CVSS0.01673EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/04 11:53 a.m.•47 views

CVE-2026-3120

Affected product: SambaBox (Profelis Information and Consulting) – versions 5.1 up to 5.3 (exclusive). Issue: Improper control of code generation leading to OS command injection. This is a network-vector vulnerability with no user interaction, potentially enabling remote command execution; CVSSv3...

7.2CVSS5.8AI score0.01673EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/04 11:53 a.m.•15 views

CVE-2026-3120 RCE in Profelis Informatics' SambaBox

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

7.2CVSS5.8AI score0.01673EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/04 11:53 a.m.•19 views

EUVD-2026-26945

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

7.2CVSS5.8AI score0.01673EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/04 12:00 a.m.•34 views

PT-2026-36796

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

7.2CVSS5.8AI score0.01673EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/04 12:00 a.m.•22 views

SambaBox 代码注入漏洞

SambaBox is a file-sharing server solution developed by SambaBox Inc. Based on Samba, versions 5.1 to 5.3 of SambaBox had a code injection vulnerability. This vulnerability stemmed from improper code generation control, which could lead to OS command injections...

7.2CVSS5.9AI score0.01673EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/04 12:00 a.m.•6 views

CVE-2026-3120: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

7.2CVSS5.8AI score0.01673EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-13111

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00604EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-30279

Malicious code in bioql PyPI...

6.7CVSS6.7AI score0.00326EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-13110

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00305EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-30280

Malicious code in bioql PyPI...

9CVSS9AI score0.00444EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:25 a.m.•17 views

CVE-2022-25619

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86...

6.7CVSS7.1AI score0.00326EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:25 a.m.•16 views

CVE-2022-25620

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vulnerable server. This issue affects: Profelis IT Consultancy SambaBox 4.0 versio...

9CVSS7.3AI score0.00444EPSS
SaveExploits0References1
Rows per page
Query Builder