HPE NonStop SQL/MX SQLCAT input validation error vulnerability

HPE NonStop SQL/MX SQLCAT T1055L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from improper input validation and may allow unauthenticated users to execute unauthorized commands...

Netgate pfSense-pkg-frr command injection vulnerability

The Netgate pfSense-pkg-frr 2.0.21 and 2.1.21 versions have a command injection vulnerability. This vulnerability stems from OS command injection within the FRR status filter. Certified WebGUI users with page-status-frr privileges can exploit this vulnerability by providing filter values that bre...

Cortex XSOAR: OS Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints. Work around: Customers who are unable to upgrade immediately can mitigate this issue by disablin...

MsgByte Tianji Code Injection Vulnerability

Versions of MsgByte Tianji before 1.31.29 contained a code injection vulnerability. This vulnerability stemmed from the use of formatString, which passed the feedTemplate and monitorNotificationsTemplate to lodash template, with the evaluate mode enabled by default. Administrators in the workspac...

Red Hat Enterprise Linux Command Injection Vulnerability

Red Hat Enterprise Linux versions 6, 7, 8, 9, and 10; Red Hat Hardened Images version 1; and Red Hat OpenShift Container Platform version 4 have a command injection vulnerability. This vulnerability stems from OpenSSH’s improper username validation in the ssh command line. usernames that contain...

PAN-OS: Authenticated Admin Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface. The security ris...

EUVD-2026-101291

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

CVE-2026-86002

The Dokku platform as a service (versions before 0.38.25 ) is vulnerable to arbitrary command execution. A user with app-level access and remote SSH access capable of executing docker-options commands can store arbitrary strings via the docker-options plugin . These strings are concatenated into ...

CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

CVE-2026-86002

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

nodejs-whisper allows OS command injection through crafted audio file paths

nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $ command substitution or closing quotes, which are interpolated into an...

GHSA-6WFJ-92CW-88VG git-diff: OS command injection vulnerability via crafted strings to the gitDiff API

git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $cmd or backtick substitutions that shelljs.exec evaluates, running comman...

git-diff: OS command injection vulnerability via crafted strings to the gitDiff API

git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $cmd or backtick substitutions that shelljs.exec evaluates, running comman...

Command Injection

Overview xhtml2pdf is a PDF generator using HTML and CSS Affected versions of this package are vulnerable to Command Injection in the startViewer function in xhtml2pdf/pisa.py, whose fallback path interpolates the file name into a shell string as os.system'open "%s"' % filename after os.startfile...

CVE-2026-73539

Gitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style argument splitting. A crafted Context can inject additional renderer arguments, including options that load executable filter files. On...

CVE-2026-59774

Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files...

CVE-2026-110645

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...

CVE-2026-110649

Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can name a media file with $... or backticks to execute operating system commands with Node.js process privileges when ffmpeg,...