TOPAZ Metron PTS Time Synchronization Command Injection

The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary OS commands...

Langflow 1.7.2-1.10.0 - Authenticated Remote Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 contains a command injection caused by insufficient input validation, letting authenticated attackers execute arbitrary OS commands and read sensitive files, exploit requires authentication. id: CVE-2026-7873 info: name: Langflow 1.7.2-1.10.0 - Authenticated...

Issabel Framework - Hard-Coded PBX API JWT Key

Issabel Framework before commit b97dbaf uses a shared HS256 key for PBX API bearer tokens. This template uses the read-only AMI ExtensionState action to check whether the PBX API accepts a short-lived token signed with either the vulnerable upstream-source key or the key in the 5.0.0-2 RPM, after...

Stirling PDF <= 2.13.1 - H2 Database Import Remote Code Execution

Stirling-PDF 2.13.2 contains a command injection caused by insufficient SQL whitelist validation in DatabaseService.validateSqlContent, letting authenticated administrators execute arbitrary OS commands via crafted SQL files, exploit requires admin authentication and default H2 database with...

PT-2026-134900

Name of the Vulnerable Software and Affected Versions WAVLINK WN701AE version M01AE V260105 Description The ioos Web Backend component contains a flaw in the del staticrule function within the static route setting.sh file. A remote attacker can execute arbitrary operating system commands by...

CVE-2026-45145

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php call PHP's native unserialize on usercareer.extradata retrieved from the database without the allowedclasses: false safety option. An attacker able to...

CVE-2026-45145 Chamilo LMS: Database-backed PHP object injection in career deserialization

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php call PHP's native unserialize on usercareer.extradata retrieved from the database without the allowedclasses: false safety option. An attacker able to...

EUVD-2026-113997

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php call PHP's native unserialize on usercareer.extradata retrieved from the database without the allowedclasses: false safety option. An attacker able to...

CVE-2026-45145

The open-source learning management system Chamilo LMS is vulnerable to a database-backed PHP object injection in its career deserialization process. Specifically, the files public/main/inc/lib/career.lib.php and public/main/cron/import_csv.php call PHP's native unserialize() on the user_career.e...

CVE-2026-45145 Chamilo LMS: Database-backed PHP object injection in career deserialization

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php call PHP's native unserialize on usercareer.extradata retrieved from the database without the allowedclasses: false safety option. An attacker able to...

CVE-2026-45145

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, "public/main/inc/lib/career.lib.php" and "public/main/cron/importcsv.php" call PHP's native "unserialize" on "usercareer.extradata" retrieved from the database without the "allowedclasses: false" safety option. An attacker...

CVE-2026-45145 Chamilo LMS: Database-backed PHP object injection in career deserialization

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php call PHP's native unserialize on usercareer.extradata retrieved from the database without the allowedclasses: false safety option. An attacker able to...

PT-2026-133606

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, public/main/inc/lib/career.lib.php and public/main/cron/import csv.php call PHP's native unserialize on user career.extra data retrieved from the database without the allowed classes: false safety option. An attacker able t...

CVE-2026-45145: chamilo chamilo-lms: Chamilo LMS is an open-source learning management system

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, public/main/inc/lib/career.lib.php and public/main/cron/importcsv.php call PHP's native unserialize on usercareer.extradata retrieved from the database without the allowedclasses: false safety option. An attacker able to...

CVE-2025-43920

GNU Mailman 2.1.39, as bundled in cPanel and WHM, in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metacharacters in an email Subject line. NOTE: multiple third parties report that they are unable to reproduce this, regardles...

CVE-2026-97854

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product...

CVE-2026-97854

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product...

EUVD-2026-112753

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product...

CVE-2026-97854

Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product...

CVE-2026-97854

The Yamaha wireless LAN router NWR100 is vulnerable to an OS command injection vulnerability (CWE-78). An unauthenticated attacker can execute arbitrary OS commands by sending a specially crafted request to the affected product. This vulnerability has a CRITICAL severity rating, with CVSS scores ...