PT-2025-15682 · Unknown · Ac-Wps-11Ac Series

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT 'AC-WPS-11ac series' affected versions not specified Description: A critical issue exists in the Wi-Fi AP UNIT 'AC-WPS-11ac series' due to an OS command injection vulnerability in a specific service. This vulnerability allows a...

CVE-2025-3361 HGiga iSherlock - OS Command Injection

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server...

CVE-2025-3361

The CVE-2025-3361 entry concerns the iSherlock web service from HGiga, which is reported to have an OS Command Injection vulnerability. The vulnerability allows unauthenticated remote attackers to inject and execute arbitrary OS commands on the server. The available documents consistently describ...

Linux Distros Unpatched Vulnerability : CVE-2023-38323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have dire...

Linux Distros Unpatched Vulnerability : CVE-2019-20807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g., Python, Ruby, or Lua...

CVE-2025-25895: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the publictype parameter. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

PT-2025-6480

Name of the Vulnerable Software and Affected Versions acmailer CGI versions 4.0.3 and earlier acmailer DB versions 1.1.5 and earlier Description An issue exists with the improper neutralization of special elements used in an OS command, which can lead to the execution of arbitrary OS commands by ...

CVE-2025-25067: Improper Neutralization of Special Elements used in an OS Command

mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands...

CVE-2021-35028

A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands...

CVE-2024-52324

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arbitrary OS commands...

CVE-2024-1522

A Cross-Site Request Forgery CSRF vulnerability in the parisneo/lollms-webui project allows remote attackers to execute arbitrary code on a victim's system. The vulnerability stems from the /executecode API endpoint, which does not properly validate requests, enabling an attacker to craft a...

PT-2025-7049

Name of the Vulnerable Software and Affected Versions mySCADA myPRO Manager affected versions not specified Description The issue exists due to the lack of measures to neutralize special elements, which could allow a remote attacker to execute arbitrary OS commands. This is an OS command injectio...

OS Command Injection

github.com/mayuresh82/gocast is vulnerable to OS Command Injection. The vulnerability is due to improper validation of user input in the name parameter, which allows specially crafted HTTP requests to inject and execute arbitrary OS commands...

CVE-2023-37777: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

PT-2025-4862

Name of the Vulnerable Software and Affected Versions UD-LT2 firmware versions 1.00.008 SE and earlier Description An issue exists due to the improper neutralization of special elements used in an OS command, allowing for the execution of arbitrary OS commands if a user logs in to the CLI of the...

CVE-2025-0457: Improper Neutralization of Special Elements used in an OS Command

The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands...

CVE-2025-0356: Improper Neutralization of Special Elements used in an OS Command

NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the network...

CVE-2024-51442

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...

CVE-2024-51442

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file...

PT-2024-17685

Name of the Vulnerable Software and Affected Versions TenderDocTransfer from Chunghwa Telecom affected versions not specified Description The application has a Reflected Cross-site scripting vulnerability. It sets up a simple local web server and provides APIs for communication with the target...