CVE-2026-16019 SQL Injection in Faydam Innovation's FAYDAM Datalogger

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue affects FAYDAM Datalogger: from 2.7.1 before 2.8.0...

CVE-2026-54795

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-62435

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-54795

Dell OpenManage Enterprise versions prior to 4.7.0 have an OS Command Injection flaw; a low-privileged remote attacker can inject special characters into input to execute arbitrary commands. Dell's DSA-2026-359 advisory recommends updating to 4.7.0 or later. No exploitation details are provided i...

EUVD-2026-62402

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-54796

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-54796

Dell OpenManage Enterprise versions prior to 4.7.0 contain an OS Command Injection flaw (CWE-78) exploitable by a high-privileged remote attacker, leading to full command execution and HIGH confidentiality, integrity, and availability impact. Dell DSA-2026-359 provides the fix; upgrade to 4.7.0 o...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell-Befehlsinjektions-Schwachstelle Ein Python-POC zur Ausnutzung der Apache Spark Shell-Befehlsinjektions-Schwachstelle. Ich habe ein paar andere POCs gesehen, aber die sahen mega sus aus. Dieser hier ist sauber und einfach. Ich habe diesen Exploit/diese Schwachstel...

PT-2026-78433

Name of the Vulnerable Software and Affected Versions Dell RecoverPoint for VMs versions 6.0.3 through 6.0.3.1 Description An OS Command Injection issue exists where special elements used in an OS command are not properly neutralized. A high privileged attacker with remote access could exploit th...

PT-2026-78626

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to properly...

PT-2026-78624

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A shell metacharacter injection flaw allows a local attacker to execute arbitrary commands on the system. Recommendations At the moment, there is no information...

PT-2026-78359

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A high privileged attacker with remote access could exploit this flaw...

PT-2026-78691

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2 Description An authenticated user can execute arbitrary commands on the source SSH host with the privileges of the connected SSH account. The issue occurs when the application interpolates endpointPort, sourcePor...

PT-2026-78382

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description A cross-site scripting issue exists in the '' block-reference autocomplete hint popup. The function genHintItemHTML app/src/protyle/hint/extend.ts concatenates a candidate block's name, alias, and mem...

Linux Distros Unpatched Vulnerability : CVE-2026-75926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the...

PT-2026-78383

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description An issue exists in the file-tree picker's hover-tooltip generation within the getLeaf and movePathTo functions located in app/src/util/pathName.ts used by the 'move/link to' path-selection dialogs...

PT-2026-78762

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description An authenticated user lacking the edit manager xml capabili...

PT-2026-78831

Name of the Vulnerable Software and Affected Versions Splunk MCP Server app versions prior to 1.2.1 Description Users with the admin Splunk role can execute arbitrary commands on the underlying operating system. This occurs due to missing input validation within the credential management componen...

PT-2026-78358

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An OS Command Injection issue exists where special elements used in an OS command are not properly neutralized. A low privileged attacker with remote access can exploit this flaw t...

MONAI vulnerable to OS command injection

Comment from JPCERT/CC We are submitting the report again as we have yet to receive any responses from you after submitting it on February 5 and March 11. It would be greatly appreciated if you could send us a message after confirming it so that we can follow up the case by email. Summary MONAI...