Lucene search
+L

72705 matches found

Nuclei
Nuclei
added 2026/07/29 5:2 a.m.63 views

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

10CVSS7.3AI score0.86958EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/07/29 5:2 a.m.111 views

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

9.8CVSS7.5AI score0.94614EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/07/29 5:2 a.m.36 views

LG Simple Editor <= v3.21.0 - Command Injection

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

9.8CVSS7.8AI score0.87649EPSS
SaveExploits4References5
Positive Technologies
Positive Technologies
added 2026/07/29 12:0 a.m.9 views

PT-2026-65910

Name of the Vulnerable Software and Affected Versions OliveTin versions 3000.2.0 through 3000.16.0 Description OS command injection is possible because the checkShellArgumentSafety function in service/internal/executor/arguments.go fails to treat regex: custom argument types as unsafe for Shell...

6.6CVSS5.8AI score0.00995EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/28 9:17 p.m.7 views

CVE-2026-14959

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection...

9.1CVSS0.01038EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 8:36 p.m.35 views

CVE-2026-14958 OS command injection in IBM Aspera Faspex

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation...

9.1CVSS0.0052EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/28 8:36 p.m.15 views

CVE-2026-14958

IBM Aspera Faspex 5 (versions 5.0.0 through 5.0.15.4) is affected by a vulnerability that allows a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation. The issue is a root cause in shell command handling that enables code execution with high impact (confide...

9.1CVSS6.3AI score0.0052EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/28 8:36 p.m.6 views

CVE-2026-14958 OS command injection in IBM Aspera Faspex

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation...

9.1CVSS6.3AI score0.0052EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 8:33 p.m.36 views

CVE-2026-14959 OS Command Injection in IBM Aspera Faspex

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection...

9.1CVSS0.01038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/28 8:33 p.m.5 views

CVE-2026-14959 OS Command Injection in IBM Aspera Faspex

IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection...

9.1CVSS6.3AI score0.01038EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/28 8:33 p.m.10 views

CVE-2026-14959

CVE-2026-14959 affects IBM Aspera Faspex 5, versioned 5.0.0 through 5.0.15.4. The vulnerability allows a remote authenticated attacker to execute arbitrary code via a shell command injection in Faspex components. Root cause: improper input handling enabling shell command execution. Impact: high w...

9.1CVSS6.3AI score0.01038EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/28 9:16 a.m.8 views

CVE-2026-61376

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.6CVSS0.01129EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/28 9:16 a.m.7 views

CVE-2026-59764

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.6CVSS0.01129EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/28 8:40 a.m.11 views

CVE-2026-61376

CVE-2026-61376 affects ELECOM wireless LAN routers and access points. The flaw is an OS Command Injection in the Restore Settings function, allowing an attacker who can log in to the product to execute arbitrary OS commands. Connected documents confirm the vulnerability and generic impact (arbitr...

8.6CVSS7.1AI score0.01129EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/28 8:40 a.m.23 views

CVE-2026-59764

Summary: CVE-2026-59764 affects ELECOM wireless LAN routers and access points. The issue is an OS command injection in the WebUI that enables an attacker who can log in to the product to execute arbitrary OS commands. The vulnerability is supported by multiple sources (NVD entries) with confirmed...

8.6CVSS7.1AI score0.01129EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/28 8:40 a.m.33 views

CVE-2026-59764

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.6CVSS0.01129EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/28 8:40 a.m.6 views

EUVD-2026-49725

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

8.6CVSS7.1AI score0.01129EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/07/28 5:35 a.m.177 views

Fortinet FortiSandbox - Command Injection

Fortinet FortiSandbox 4.4.0 through 4.4.8 contains a command injection caused by improper neutralization of special elements in OS commands, letting attackers execute unauthorized code or commands, exploit requires crafted input. id: CVE-2026-39808 info: name: Fortinet FortiSandbox - Command...

9.8CVSS7.6AI score0.89691EPSS
SaveExploits7References2
Nuclei
Nuclei
added 2026/07/28 5:35 a.m.90 views

cPH2 Charging Station v1.87.0 - OS Command Injection

An OS command injection vulnerability in Hardy Barth cPH2 Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature. id: CVE-2023-46359 info: name: cPH2...

9.8CVSS7.6AI score0.87495EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/07/28 5:35 a.m.128 views

Kafka UI 0.7.1 Command Injection

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. id: CVE-2023-52251 info: name: Kafka UI 0.7.1 Command Injection author: yhy0,iamnoooob severity: high description: | An...

8.8CVSS7.7AI score0.85025EPSS
SaveExploits5References3
Rows per page
Query Builder