EUVD-2026-93419

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the runshell tool in the CommandLineExecutor component of ufo/client/mcp/localservers/climcpserver.py validates only the first token of the bashcommand parameter and permits...

CVE-2026-1046: Improper Authorization in Handler for Custom URL Scheme

Mattermost Desktop App versions =6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577...

CVE-2023-22576: Improper Privilege Management

Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges...

CVE-2023-7235

The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables...

CVE-2021-35056: Unquoted Search Path or Element

Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run...

PT-2018-2183

Name of the Vulnerable Software and Affected Versions Pro-Face GP-Pro EX versions 4.08 and earlier Description The issue is related to improper input validation, which could lead to the execution of arbitrary executables when GP-Pro EX is launched. This is a result of insufficient validation of...

PT-2013-6307

Name of the Vulnerable Software and Affected Versions http.server.CGIHTTPRequestHandler affected versions not specified Description The issue is related to an error in separating the path and filename of the CGI script to run, allowing the execution of arbitrary executables in the directory under...