94982 matches found
SUSE-SU-2026:3914-1 Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.7.1. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775...
EUVD-2026-69249
A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...
CVE-2026-84233
A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...
CVE-2026-84233
A flaw was found in rpm. A local attacker could supply a specially crafted .gem filename containing RPM macro syntax. When a user or automated workflow invokes rpmuncompress -x on this file, the macro expansion occurs during command construction. This allows the attacker to execute arbitrary...
CVE-2026-58571
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...
CVE-2026-13336
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...
EUVD-2026-69149
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...
CVE-2026-58571
Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...
CVE-2026-58571
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...
CVE-2026-58571
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...
CVE-2026-13336
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...
CVE-2026-13336
CVE-2026-13336 is a CWE-78 (OS Command Injection) vulnerability identified by Schneider Electric (advisory SEVD-2026-223-02). The flaw allows execution of Linux operating system commands when a maliciously modified system backup is restored. The CVSS 4.0 score is 7.3 (HIGH) , with an adjacent net...
EUVD-2026-69132
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...
CVE-2026-13336
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...
Linksys E1200 v2 - tmUnblock.cgi Command Injection (CVE-2025-60689)
Unauthenticated OS command injection in Linksys E1200 firmware = v2.0.04 via POST /tmUnblock.cgi ttcpip. Blind injection: use the default reverse payload/listener or nopayload + execute session. Admin UI is often on port 80 or 8080 depending on deployment. !/usr/bin/env python3 -- coding: utf-8 -...
Exploit for OS Command Injection in Axis Axis_Os
CVE-2025-11142 — AXIS mediaclip.cgi OS Command Injection...
CVE-2026-84194
LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...
Exploit for CVE-2026-82592
D-Link Router DIR-825M - Buffer Overflow in /boafrm/formDiskFo...
EUVD-2026-69031
LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...