MariaDB wsrep_notify_cmd Command Execution

The vulnerability of the wsrepnotifyCmd function in the MariaDB database management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CWMP/TR-069 Protocol Code Execution Root Privileges

The vulnerability of the CWMP/TR-069 protocol implementation of TP-Link Archer VX1800v V1 software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...

TOTOLINK A3300R Router Command Execution

The vulnerability of the setUPnPCfg function in TOTOLINK A3300R router microprogramming systems is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A3300R SetVpnPassCfg Command Execution

The vulnerability of the setVpnPassCfg function in TOTOLINK A3300R router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-94097 Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection

A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/networktools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote exploitation of the attack is possibl...

CVE-2026-94097

Netcore NBR200V2 (version 1.3.241127.071246) contains a command injection vulnerability in the CGI Diagnostic Endpoint at /www/cgi-bin/network_tools. Manipulation of the param, key, or val arguments allows remote, unauthenticated attackers to inject commands with low complexity and no user intera...

CVE-2026-94097 Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection

A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/networktools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/key/val causes command injection. Remote exploitation of the attack is possibl...

CVE-2026-94096 Netcore NBR200V2 LAN IP Configuration network_tools command injection

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched...

CVE-2026-94096

CVE-2026-94096 is a command injection vulnerability in Netcore NBR200V2 firmware 1.3.241127.071246 , located in the LAN IP Configuration Handler component (file /usr/bin/network_tools). The injection is triggered by manipulating the ipv4 argument and can be launched remotely . The exploit is rate...

CVE-2026-94096 Netcore NBR200V2 LAN IP Configuration network_tools command injection

A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/networktools of the component LAN IP Configuration Handler. The manipulation of the argument ipv4 results in command injection. The attack may be launched...

CVE-2026-94095 Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection

A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/networktools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection. The attack may be...

CVE-2026-94095 Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection

A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/networktools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to command injection. The attack may be...

CVE-2026-94095

Netcore NBR200V2 (firmware 1.3.241127.071246) is affected by a command injection vulnerability in the Traceroute Diagnostic Feature located in /usr/bin/network_tools. The root cause is improper sanitization of the url argument , allowing an authenticated remote attacker (low privileges required) ...

CVE-2026-94031

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

EUVD-2026-83747

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

CVE-2026-94031 0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

CVE-2026-94031 0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

CVE-2026-94031 0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

CVE-2026-94031

A command injection vulnerability exists in the nexus_reauth MCP tool of the nexus-mcp project (0-Gaurav-0/nexus-mcp). The child_process.exec function in src/auth/browser.ts fails to properly sanitize the url argument, allowing a remote attacker with low privileges to inject arbitrary commands. T...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the shell-out handlers process. An attacker can execute arbitrary operating system commands by supplying specially crafted filenames containing shell metacharacters. Remediation Upgrade james-heinrich/getid3 to...