152986 matches found
EUVD-2026-64706
4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...
CVE-2026-78211 4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection
4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...
CVE-2026-78211
4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...
CVE-2026-78177
A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...
CVE-2026-78177 TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection
A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...
EUVD-2026-64694
A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...
CVE-2026-78177
TanStack devtools-vite 0.7.0 is affected by an OS command injection vulnerability in the installPackage function within packages/devtools-bundler-core/src/package-manager.ts (component: Development Devtools Event Bus). The root cause is unsanitized handling of the packageName argument, allowing a...
EUVD-2026-64666
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
PT-2026-79818
Name of the Vulnerable Software and Affected Versions 4MOSAn GCB Doctor affected versions not specified Description An OS Command Injection issue exists where unauthenticated remote attackers can execute arbitrary system commands on the server. This is possible through a parameter in an unremoved...
CVE-2026-78141
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-78141
A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw resides in the function formexeCommand within the file /goform/exeCommand , where unsanitized manipulation of the argument cmdinput allows an attacker to inject arbitrary commands. The attack is remotely ex...
vuln-labs-angara
vuln-labs-angara Семь независимых Docker-стендов с уязвимыми...
Vulnerability handling in Zimbra Collaboration Suite
Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...
CVE-2026-78063
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...
CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...
CVE-2026-78063
A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw is in the function formeditFileName within the file /goform/editFileName , where manipulation of the editNameMit argument allows an authenticated remote attacker to inject and execute arbitrary commands. Th...
EUVD-2026-64632
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...
PT-2026-79783
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-68766
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...