CVE-2026-112195

A flaw in the Dialplan Editor component of FusionPBX (versions up to 5.4.4/5.5.7/5.6.5 ) allows for OS command injection . The vulnerability resides in an unknown function within the file app/dialplans/resources/classes/dialplan.php. An attacker can execute this attack remotely via a manipulation...

CVE-2026-112195 FusionPBX Dialplan Editor dialplan.php os command injection

A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-112159

JumpServer versions up to 4.10.19 are vulnerable to an OS command injection vulnerability in the Template Rendering component. The flaw exists in an unknown function where the manipulation of the IP/HOST argument allows for remote exploitation. A public exploit is available. To remediate this, us...

CVE-2026-112159 JumpServer Template Rendering os command injection

A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...

EUVD-2026-104455

A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-112159 JumpServer Template Rendering os command injection

A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-103038

PingTools Network Utilities 4.64 Free is vulnerable to an OS command injection (CWE-78) within the Watcher ICMP service . The application accepts arbitrary input in the Host field and improperly incorporates it into a command string executed via sh -c . This flaw allows for unauthorized command e...

CVE-2026-103038 PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host

PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who...

CVE-2026-112263

Television tv 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in formatcommand. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the...

CVE-2026-112263 Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

Television tv 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in formatcommand. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the...

CVE-2026-112263 Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

Television tv 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in formatcommand. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the...

EUVD-2026-104310

Television tv 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in formatcommand. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the...

CVE-2026-112263

The Television (tv) application, versions 0.15.0 through 0.15.9 , is vulnerable to OS command injection due to improperly escaped single quotes in the format_command function. An attacker can exploit this by planting a file with a crafted name containing an apostrophe; subsequently, triggering an...

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400: Vulnerability Analysis, Patch Management, Cyber...

Important: Red Hat Security Advisory: emacs security update

An update for emacs is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

emacs: emacs: Command injection via crafted filenames in TRAMP

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters

A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...

Moderate: Red Hat Security Advisory: environment-modules security update

An update for environment-modules is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Cacti cmd_realtime.php - Command Injection

Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. In cmdrealtime.php line 119, the $pollerid used ...