EUVD-2020-31276

easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting shell metacharacters into source paths, destination path, or maxHeap option. Attackers can supply file names or options containing double quotes, semicolons, $ ...

CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Proof-of-concept exploit for CVE-2025-69212 , an OS Command Injection vulnerability in OpenSTAManager ;echo ".p7m Resulting shell execution: openssl smime ... -in "invoice.p7m";;echo ".p7m" ... ^^^^^^^^^^^^ injected here Note: The forward...

CVE-2026-108917

A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclos...

CVE-2026-108918

A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The...

CVE-2026-108916

A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-108918 Edimax BR-6208AC formWlanMP command injection

A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The...

CVE-2026-108918

A command injection vulnerability exists in the Edimax BR-6208AC (version 1.32) within an unknown function of the /goform/formWlanMP file. An attacker can trigger this vulnerability remotely by manipulating the readE2P argument. The vulnerability impacts products that are no longer supported by t...

EUVD-2026-97738

A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The...

CVE-2026-108917 Edimax BR-6208AC formAutoFWupgrade command injection

A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclos...

CVE-2026-108917

The Edimax BR-6208AC (version 1.32 ) is vulnerable to a command injection flaw within the /goform/formAutoFWupgrade file. An attacker can achieve remote command execution by manipulating the tftpsIP argument. This vulnerability is confirmed to have publicly disclosed exploits that may be utilized...

EUVD-2026-97732

A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclos...

CVE-2026-108916

The Edimax BR-6208AC (version 1.32) is susceptible to a remote command injection vulnerability within the /goform/formAccept file. This issue stems from improper neutralization of input in the submit-url argument, allowing an attacker to execute arbitrary commands remotely. Public exploits for th...

CVE-2026-108916 Edimax BR-6208AC formAccept command injection

A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and...

EUVD-2026-97727

A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-109318

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109318

The Grav Git Sync plugin, versions 1.0.2 through 3.4.12 , is vulnerable to command injection when the gravuser or gravfull author modes are enabled. Authenticated content editors can execute OS commands by injecting shell substitutions into profile fields, such as username , full name , or email ...

CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

EUVD-2026-97620

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-109318 Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author

Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full...

CVE-2026-108895

A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MACaddr can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the...