CVE-2026-108576: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function processping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was contacted early about th...

CVE-2026-108744: Improper Neutralization of Special Elements used in an OS Command

pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim...

PT-2026-110146

Name of the Vulnerable Software and Affected Versions pbi-cli versions 3.10.1 through 3.12.0 Description An OS command injection issue exists in desktop sync.py when reopening projects. The software passes unquoted .pbip paths to cmd /c start, allowing an attacker to execute arbitrary commands wi...

CVE-2026-108976: Incomplete List of Disallowed Inputs

GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992...

PT-2026-110108

VTCode auto-approved find after three yeses, then -exe$''c slipped past the -exec block CVE-2026-104247, CVSS 6.3. Family learning plus exact-token denylists is a parser gap the shell wins. Fixed in 0.171.5. If your coding agent banks command approvals, which flags still get a free pass after the...

PT-2026-110345

Name of the Vulnerable Software and Affected Versions GNU Emacs versions prior to 31.2 TRAMP versions prior to 2.8.3 Description OS command injection is possible via a filename due to an incomplete list of disallowed inputs in tramp-user-regexp. This issue stems from an incomplete fix for a...

Empire

Empire Empire è un framework di post-exploitation e adversary emulation utilizzato per supportare i Red Team e i Penetration Tester. Il server di Empire è scritto in Python 3 ed è modulare per consentire flessibilità all'operatore. Empire include nativamente un client che può essere utilizzato da...

ipatool

ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements A supported operating system macOS, Linux, Windows or iOS. An Apple Account already configured to use the...

CVE-2026-108598

Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtim...

CVE-2026-108598

Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtim...

EUVD-2026-96394

Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtim...

CVE-2026-108593

9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and...

rdpscan

rdpscan per la vulnerabilità CVE-2019-0708 bluekeep Questo è uno scanner rapido e sporco per la vulnerabilità CVE-2019-0708 in Microsoft Remote Desktop. Al momento, circa 900.000 macchine su Internet pubblico sono vulnerabili a questa vulnerabilità, quindi molti si aspettano presto un worm come...

Mina Saad pbi-cli command injection vulnerability

Mina Saad’s pbi-cli version 3.10.1 to 3.12.0 has a command injection vulnerability. This vulnerability stems from the use of desktopsync.py, which passes unquoted .pbip paths to the cmd /c start command. This makes it vulnerable to OS command injection attacks. An attacker can induce victims to...

TOZED X300 Command Injection Vulnerability

The TOZED X300 versions 6.01.3 and earlier have a command injection vulnerability. This vulnerability stems from the incorrect handling of the Host parameter in the processping function of the IPPingDiagnostics Handler component, which may lead to remote OS command injection...

openspug Spug command injection vulnerability

Openspug Spug versions 3.0, 3.1, 3.2, 3.3, 3.4.0, 4.0.0, and 4.0.1 have command injection vulnerabilities. These vulnerabilities stem from the unknown functions of the File Transfer component, which fail to properly validate inputs when executing operations related to the /exec/transfer function...

p0wny-shell

p0wny@shell: -- Shell PHP monofile p0wny@shell: è una shell PHP monofile molto basilare. Può essere usata per eseguire rapidamente comandi su un server quando si esegue il pentesting di un'applicazione PHP. Usala con cautela: questo script rappresenta un rischio per la sicurezza del server...

CVE-2026-108553

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating...

CVE-2026-108546

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

CVE-2026-108546

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...