192432 matches found
CVE-2026-90868
Progress Software WS_FTP Server on Windows versions prior to 2024.0.7 and 2025.0.4 is vulnerable to an OS command injection vulnerability. This flaw allows for arbitrary command execution under certain configurations. The vulnerability is associated with CWE-78 (Improper Neutralization of Special...
EUVD-2026-113025
An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations...
EUVD-2026-113022
An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations...
CVE-2026-90865 Command Injection via FTP Notification Variables in Progress WS_FTP Server
An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations...
CVE-2026-90865
Progress Software WS_FTP Server on Windows is vulnerable to an OS command injection vulnerability in versions prior to 2024.0.7 and 2025.0.4 . The flaw exists in FTP Notification Variables , which could allow an attacker to execute arbitrary commands with elevated privileges under specific config...
CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE
Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...
CVE-2026-90863 Privilege Escalation via Missing Authorization in WS_FTP Manager
Missing authorization in the administrative interface of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and...
CVE-2026-90863
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows are vulnerable to a missing authorization flaw in the administrative interface. This flaw could allow a delegated Host Administrator to exceed their authorized scope, potentially leading to arbitrary command execut...
EUVD-2026-113020
Missing authorization in the administrative interface of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and...
EUVD-2026-113151
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an OS command...
CVE-2026-104308
The Langflow OSS software, versions 1.0.0 through 1.12.3 , is vulnerable to an OS Command Injection (CWE-78) flaw. A remote authenticated attacker could exploit the improper neutralization of special elements used in an OS command to cause a denial of service . This vulnerability is assigned a CV...
EUVD-2026-113141
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104328 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104328
IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to arbitrary code execution due to the improper neutralization of special elements used in an OS command (CWE-94). This flaw allows a remote authenticated attacker to execute commands on the system. The impact includes high severity ac...
CVE-2026-104339
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104339 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
EUVD-2026-113139
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-104339
Langflow OSS versions 1.0.0 through 1.12.3 are affected by a critical code injection vulnerability (CVE-2026-104339). The flaw stems from the improper neutralization of special elements used in an OS command, which could allow a remote attacker to execute arbitrary code . The impact is significan...
CVE-2026-107326 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...