CVE-2026-97863 misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values

The ciscofiresightmanagerACLruleexport module in misp-modules generates a shell script .sh that authenticates to and calls the Cisco fireSIGHT Manager API. The module interpolates configuration values IP address, login, password, domain ID, policy ID and MISP attribute values destination IPs, URL...

Exploit for CVE-2026-61732

CVE-2026-61732 — Decepticon ChatML role-boundary forgery lab...

kj33-cpe-root-shell

One POST to root: the "Wi-Fi 6" 5G CPE that isn't A carrier...

CVE-2026-32604

CVE-2026-32604 - Spinnaker GitRepo 아티팩트 RCE CVE-2026-32604 - git/repo 아티팩트 유형을 통한 Spinnaker의 원격 코드 실행. 이것은 Spinnaker의 GitRepo 아티팩트 처리에서 발생하는 명령 주입 / 원격 코드 실행 취약점입니다. 취약한 기능은 git/repo 아티팩트의 version 필드를 통해 사용자가 제어하는 값이 적절히 정제되지 않은 채 명령 실행에 도달할 수 있도록 합니다. 취약한 엔드포인트는 다음과 같습니다: PUT /artifacts/fetch 중요...

Malicious code in n8n-nodes-flowstats (npm)

Source: amazon-inspector 8aa25eb3d56eb14b75cbb4dedbd5d09063e4b742b53acef9a4096cc77213b8f3 The package presents itself as an n8n community node that annotates items with flow statistics, but nodes/FlowStats.node.js contains two independent attacker-benefiting mechanisms. First, a top-level IIFE ru...

MAL-2026-17175 Malicious code in n8n-nodes-flowstats (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa25eb3d56eb14b75cbb4dedbd5d09063e4b742b53acef9a4096cc77213b8f3 The package presents itself as an n8n community node that annotates items with flow statistics, but nodes/FlowStats.node.js contains two independent...

Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by...

Webmin <= 1.920 - Unauthenticated Remote Command Execution

Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. id: CVE-2019-15107 info: name: Webmin = 1.920 - Unauthenticated Remote Command Execution author: bp0lr severity: critical description: Webmin =1.920. is vulnerable to an...

EUVD-2026-86482

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command...

CVE-2026-85082

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command...

CVE-2025-51457

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands...

CVE-2025-51457

The D-Link DAP-2610 router, running firmware version up to 2.06B08r099 , is susceptible to an authenticated command injection vulnerability. This flaw exists within the web interface at the /index.xgi endpoint, where an attacker with valid credentials can exploit specific parameters to execute ar...

CVE-2026-100369: Improper Neutralization of Argument Delimiters in a Command

CliInvoke and its formerly named AlastairLundy.CliInvoke package are .NET libraries for invoking command-line programs and wrapping executable processes. CliInvoke versions 2.0.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4, and 3.0.0-alpha.1 through 3.0.0-beta.1, as well as...

CVE-2026-91838: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...

CVE-2026-85542: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...

CVE-2025-51457: Improper Neutralization of Special Elements used in a Command

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands...

PT-2026-99139

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 2.0.0 Description An issue exists in the export data function within the HorillaListView class located in horilla views/generic/cbv/views.py. The application accepts a columns POST parameter from an authenticated user...

CliInvoke: Argument Injection in Extensibility Runner Factory

An argument-injection vulnerability exists in the CliInvoke package's runner factory: RunnerProcessFactory on the 2.x line and RunnerConfigurationFactory on the 3.x line. The factory joins the runner arguments, the caller's target, and the caller's arguments into a single ProcessStartInfo.Argumen...

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

An OS command injection vulnerability exists in the PowerShell and Cmd shell wrappers provided by the CliInvoke.Specializations package the PowershellProcessInvoker/CmdProcessInvoker invokers, and the UsePowerShell/UseCmd middleware in v3 pre-release versions. The wrappers re-run a caller-supplie...

libssh Arbitrary Command Execution

The vulnerability of the libssh library is related to the lack of measures taken to clean data at the administrative level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...