73024 matches found
CVE-2026-72733 Dokploy: OS Command Injection via `databaseName` / `backupFile` in database restore
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC subscription builds database restore shell pipelines from the user-controlled databaseName and backupFile fields without safely separating them from shell syntax...
9.9CVSS
SaveExploits0References6
20