193394 matches found
CVE-2026-116219
Dolibarr ERP CRM versions before 24.0.0 are vulnerable to an OS command injection in htdocs/admin/tools/export.php. This vulnerability allows authenticated administrators to bypass the restrict_os_commands allowlist by submitting a mysqldump value with command chaining characters (e.g., &) placed...
CVE-2026-116219 Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter
Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the restrictoscommands allowlist. Attackers can submit a mysqldump value chaining commands with & characters around an allowlisted basename ...
Exploit for OS Command Injection in Zyxel Atp100_Firmware
CVE-2023-...
Exploit for OS Command Injection in Esds.Co Emagic_Data_Center_Management
CVE-2023-...
StealC Malware Returns as Stadia RAT After Operation Endgame Takedown
StealC's seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using…...
Security Bulletin:Multiple vulnerabilities in netty-codec-smtp may affect IBM Infosphere Change Data Capture (CVE-2026-93563, CVE-2026-93576)
Summary Multiple security vulnerabilities have been identified in netty-codec-smtp, Netty/Codec/SMTP. netty-codec-smtp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
jboss-autopwn
⚠️ NOTE: This tool is no longer under active maintenance. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss AS server. Once deployed, the script uses its upload and command execution capability to provid...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Freefloat Freefloat_Ftp_Server
🔍 Análisis de la vulnerabilidad CVE-2025-5548 en FreeFloat FTP...
CVE-2026-116118
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
EUVD-2026-109610
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
CVE-2026-116118
A vulnerability exists in Z.ai Zcode versions up to 3.14.3/3.15.1 within the Sed Command Filter component. Improper neutralization of special elements allows for OS command injection , which can be triggered remotely. Public exploits for this vulnerability have been disclosed and may be used. No ...
CVE-2026-116118 Z.ai Zcode Sed Command Filter os command injection
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
CVE-2026-116118 Z.ai Zcode Sed Command Filter os command injection
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
CVE-2026-116109
A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP Server Transport. Such manipulation leads to os command injection. The attack can be executed...
Important: Red Hat Security Advisory: lrzsz security, bug fix, and enhancement update
An update for lrzsz is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode
A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...
CVE-2026-116109
A vulnerability exists in continuedev Continue 2.0.0 within the MCP Server Transport component. Specifically, the MCPManagerSingleton.setConnections function in the file core/config/ConfigHandler.ts is susceptible to OS command injection . This flaw can be exploited remotely to execute arbitrary ...
CVE-2026-116109 continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP Server Transport. Such manipulation leads to os command injection. The attack can be executed...
EUVD-2026-109601
A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP Server Transport. Such manipulation leads to os command injection. The attack can be executed...
CVE-2026-116109 continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP Server Transport. Such manipulation leads to os command injection. The attack can be executed...