TRENDnet TV-IP302PI 1.02.38 NTP Command Injection

TRENDnet TV-IP302PI version 1.02.38 contains an authenticated command injection vulnerability in the NTP server address that reaches a root shell-form system call. https://packetstorm.news/download/236511...

PT-2026-118256

ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, thereby uploading malicious code to the server...

PT-2026-118652

An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

Exasol Database 7.1.30 Default Credential Python UDF Command Execution

Exasol Database version 7.1.30 docker-db deployments use the documented SYS default credential, which can create a PYTHON3 UDF invoking os.popen and return command output through SELECT. https://packetstorm.news/download/236507...

PT-2026-118357

A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub 182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interface. This manipulation of the argument usefile/usescript/option causes os command injection. Remote exploitation of t...

Edimax BR-6478AC 2.20 Command Injection

Edimax BR-6478AC version 2.20 contains an authenticated command injection vulnerability in the setWAN WAN-configuration handler that can lead to root command execution. https://packetstorm.news/download/236506...

Red Hat: CVE-2026-87864: curl: IMAP APPEND plus CRLF conversion command injection

Enabling CURLOPTCRLF causes curl to advertise the raw input byte count in the IMAP APPEND N literal while transmitting line-ending expanded data. The server reads only $N$ bytes for the payload, causing the remaining overflow bytes to be interpreted and executed as pipelined IMAP commands within...

Linux Distros Unpatched Vulnerability : CVE-2026-112900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input...

Totolink X2000R batchupg OS command injection vulnerability

Summary A OS command injection vulnerability exists in the batchupg functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

Red Hat: CVE-2026-112177: ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted...

PT-2026-118259

Name of the Vulnerable Software and Affected Versions Ghostscript versions 9.25 through 9.27 Description An issue exists where privileged .forceput operations within the .charkeys procedure are insufficiently protected. This occurs because a previous correction was omitted during a version rebase...

PT-2026-120139

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.2 Description The FishActivator component inherits ViaTemplateActivator.quote, which utilizes the POSIX shlex.quote function. Because the fish shell interprets backslashes and single quotes differently than...

PT-2026-118507

Name of the Vulnerable Software and Affected Versions aaPanel versions prior to 8.25.0 Description An OS command injection issue exists in the File Manager component. The ExecShell function within the class/public/common.py file is susceptible to manipulation via the sfile, dfile, access, and use...

PT-2026-118590

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A versions prior to M30BE1 V251117 Description An OS command injection flaw exists in the sub 23B54 function of the ioos binary. The issue occurs when the /protocol.csp?opt=ovpn file endpoint processes requests with type=de...

PT-2026-120140

Name of the Vulnerable Software and Affected Versions virtualenv versions 20.26.6 through 21.14.1 Description The ViaTemplateActivator.instantiate template function replaces placeholders sequentially across the activation template. This allows trigger names like VIRTUAL NAME , VIRTUAL ENV , or...

PT-2026-120298

Summary launch-editor checked fs.existsSyncfileName before passing a supplied path to an editor command. On Windows, an attacker can bypass this check with a crafted path ending in ..:line:column. This removes the requirement that the attacker be able to place a file with a malicious filename...

PT-2026-118405

Name of the Vulnerable Software and Affected Versions launch-editor versions prior to 2.14.2 Description The launchEditor function forwards file paths to editors without proper sanitization. If an attacker can create a filesystem entry starting with a plus + or minus - sign in the working...

EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

RockyLinux 10 : emacs (RLSA-2026:84591)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84591 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: emacs: Command injection via crafted filenam...

CVE-2026-112370

A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was...