CVE-2025-7769

CVE-2025-7769 – Remote Command Injection in mobileapi Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE‑2025‑7769 , a critical remote Command Injection vulnerability found in Tigo Energy CCA appliances exposing the /cgi-bin/mobileapi endpoint. The vulnerability is...

EUVD-2026-110815

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration daemon's time synchronization handler, which is responsible for setting th...

CVE-2026-13162

An OS command vulnerability exists in the CoreTec product within the configuration daemon's time synchronization handler , which manages system time-zone settings. The flaw occurs because the daemon constructs shell commands by concatenating user-supplied input without sufficient sanitization or ...

CVE-2026-13162

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration daemon's time synchronization handler, which is responsible for setting th...

EUVD-2026-110762

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

CVE-2026-113644 iofogctl command injection via Controller provisioning response

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

CVE-2026-113644

Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1 are vulnerable to command injection . The root cause is the unsanitized concatenation of the provisioning key and CA certificate from the Controller API into shell commands (such as edgelet provision or iofog-agent p...

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands "edgelet provision" and "edgelet config cert" on supported releases; "iofog-agent provision" and...

CVE-2026-113644 iofogctl command injection via Controller provisioning response

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands edgelet provision and edgelet config cert on supported releases; iofog-agent provision and iofog-agent...

CVE-2026-117530

In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands...

CVE-2026-117530

The JetBrains Junie CLI is vulnerable to command execution in versions prior to 26.8.17 . The root cause is incomplete validation of allowlisted commands (CWE-184). This flaw allows for unauthorized command execution, potentially impacting confidentiality, integrity, and availability. Remediation...

EUVD-2026-110698

In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands...

CVE-2026-117530

In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands...

CVE-2026-82119

OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 through...

EUVD-2026-110664

OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 through...

CVE-2026-82119

The HiRDB software is susceptible to an OS Command Injection vulnerability (CWE-78 ). This flaw affects multiple versions, including HiRDB Server Version 10 (10-00 to 10-12-01), Version 9 (09-00 through 09-66-22), and various Additional Function versions. The vulnerability allows for remote netwo...

CVE-2026-82119 OS Command Injection Vulnerability in HiRDB

OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 through...

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate ASD says. The agency's operators gained access to the criminal's operation's backend and cut it off from those...

CVE-2026-65219

A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands...

CVE-2026-16521

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...