CVE-2026-110005

A flaw was found in Komodo. The periphery agent's container-management functionality passes container names directly into an operating system shell without proper escaping. An authenticated user with low privileges can supply specially crafted container names to execute arbitrary commands with ro...

tenda-hg10-rce

CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...

CVE-2026-45449

: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...

CLSA-2026-1792080478 emacs: Fix of 3 CVEs

CVE-2026-77219: fix integer overflow in PBM image loader - CVE-2026-79992: restrict Tramp user names to prevent shell command injection - CVE-2026-108976: strengthen Tramp user and host name validation...

Theme-One The Grid Code Injection Vulnerability

Theme-One The Grid 2.8.1 and earlier versions have a code injection vulnerability. This vulnerability stems from improper code generation control, which may lead to command injection...

WordPress WP Photo Album Plus command injection vulnerability

WordPress WP Photo Album Plus versions 9.3.02.002 and earlier have a command injection vulnerability. This vulnerability stems from the value parameter in the update-photo AJAX action being concatenated into the ImageMagick command without proper shell escaping in the wppaimagemagicka function...

5rahim Seanime command injection vulnerability

The 5rahim Seanime version from 3.7.0 to 3.10.3 has a command injection vulnerability. This vulnerability arises due to improper authorization; unauthenticated LAN or Tailnet clients can bypass the media stream settings. By using the transcodeHwAccelCustomSettings field, they can append...

ZoneMinder command injection vulnerability

Versions of ZoneMinder prior to 1.36.40, as well as versions 1.38.0 to 1.38.2 and 1.39.0 to 1.39.2, have a command injection vulnerability. This vulnerability stems from the insertion of an unvalidated monitor Device field into shell commands in PHP and Perl. When authenticated users with the...

Stored-Project libblockdev command injection vulnerability

The stored-project libblockdev component has a command injection vulnerability. This vulnerability stems from the fact that the libblockdev functions bdfsntfssetlabel and bdfsvfatsetlabel do not perform input validation on label values that start with a “-”. Additionally, they do not use an...

CodeWithCJ SparkyFitness command injection vulnerability

Versions of CodeWithCJ SparkyFitness prior to 1.6.0 have a command injection vulnerability. This vulnerability arises from the API/admin/backup/restore endpoints interpolating the names of uploaded files into shell commands. Certified global administrators can upload recovery archives whose file...

ZoneMinder command injection vulnerability

Versions of ZoneMinder from 1.37.48 to 1.38.3 had a command injection vulnerability. This vulnerability stemmed from the downloadEvents function, which enclosed monitoring names in single quotes without using escapeshellarg for escaping. When users with permission to create or edit monitors store...

WHEELS.DEV: Wheel commands injection vulnerability

WHEELS.DEV: Wheels 4.0.0 to 4.1.2 versions had a command injection vulnerability. This vulnerability stemmed from insufficient validation or escaping of values and package contents provided by callers. It allowed for the introduction of malicious inputs through CI variables, branch names, package...

ZoneMinder command injection vulnerability

Versions of ZoneMinder prior to 1.38.3 have a command injection vulnerability. This vulnerability arises from the exportEvents function, which does not neutralize the shell metacharacter in the exportFile request parameter; instead, it appends the shell command to the URL. This issue is related t...

Astra Linux – Vulnerability in Ansible

A vulnerability was discovered in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, and 2.7.x before 2.7.16 and earlier. In these versions, the nxosfilecopy module of Ansible can be used to copy files to the flash or bootflash on NXOS devices. Malicious code could manipulate the...

Astra Linux – vulnerability in openssh

In OpenSSH versions prior to 9.6, OS command injection may occur if a username or hostname contains shell metacharacters, and such names are referenced via expansion tokens in certain scenarios. For instance, an untrusted Git repository might contain a submodule with shell metacharacters in its...

Astra Linux – vulnerability in Composer

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::generateP4Command method. This method constructs shell commands by interpolating user-supplied Perforce connection parameters—such as port, user,...

Astra Linux – Vulnerability in python-git

GitPython before version 3.1.51 fails to protect against dangerous Git options passed as keyword arguments in Repo.archive and git.lsremote. This allows command injection through options such as --exec/--upload-pack, leading to arbitrary command execution. Additionally, Repo.itercommits and...

Astra Linux – Vulnerability in Node.js

A OS command injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check. This vulnerability can be easily exploited, as the IsIPAddress function does not properly check whether an IP address is invalid before making DBS requests, thereby...

Astra Linux – Vulnerability in FontForge

Splinefont in FontForge, with a version number of 20230101, allows for command injection through crafted archives or compressed files...

Astra Linux – Vulnerability in Zabbix

Zabbix allows for the configuration of SMS notifications. AT command injection occurs on the “Zabbix Server” because there is no validation of the “Number” field either on the web interface or on the Zabbix server side. An attacker can send specially crafted phone numbers via SMS and execute...