93345 matches found
Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 - Command Injection
A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file listbaseconfig.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible...
Node.JS System Information Library <5.3.1 - Remote Command Injection
Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. id: CVE-2021-21315 info: name: Node.JS System...
Vulnerability-DLink-CVE-2025-14659
CVE-2025-14659 : Analyse de l'injection de commandes dans le démon DHCP de D-Link Projet Recreate CVE | Sécurité Offensive Auteur : Peter Lin Date : Mai 2026 Présentation du projet : CVE-2025-14659 a signalé une vulnérabilité d'injection de commandes ciblant le composant démon DHCP présent dans l...
CVE-2026-105134: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...
CVE-2026-27626-POC
CVE-2026-27626: OliveTin 비밀번호 인자 명령 주입 OliveTin은 관리자가 "actions"사용자가 웹 UI 또는 API에서 트리거할 수 있는, 매개변수화된 인자를 가진 셸 명령을 정의할 수 있게 해줍니다. OliveTin은 사용자가 제공한 값을 셸 명령에 템플릿화하기 전에 checkShellArgumentSafety를 통해 검사해야 합니다. 이 함수는 string, int, bool, choice의 네 가지 인자 유형을 검사합니다. password는 완전히 건너뛰고 값은 전혀 보지 않은 채 "안전함"을...
Exploit for Argument Injection in Thecodingmachine Gotenberg
🔥 GOTENBERG RCE CHAIN CVE-2026-42589 + CVE-2026-40281 !...
Exploit for OS Command Injection in Fortinet Fortisandbox
CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection...
Exploit for OS Command Injection in Redhat Openshift_Container_Platform
CVE-2026-4480 - Samba Print Command Injection - RCE sin Autent...
CVE-2026-105105
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...
CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...
CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...
CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...
CVE-2026-105105
The NASA-AMMOS AIT-Core (versions through 3.1.1 ) is vulnerable to CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server ). The underlying cause is that the ZeroMQ broker binds its XSUB and XPUB sockets to all network interfaces by d...
EUVD-2026-92014
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...
Apache Kylin 3.0.1 - Command Injection Vulnerability
Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation. id: CVE-2020-1956 info: name: Apache Kylin 3.0.1 - Command Injecti...
D-Link - Unauthenticated Remote Code Execution
OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...
EUVD-2026-91838
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...
PT-2026-104572
Name of the Vulnerable Software and Affected Versions NASA-AMMOS AIT-Core versions prior to 3.1.2 Description The ait.core.server telemetry and command broker ait-server lacks authentication for critical functions. By default, the ZeroMQ message bus binds its XSUB and XPUB sockets to all network...
CVE-2026-105105: Missing Authentication for Critical Function
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...