TOTOLINK X2000R command injection vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from OS command injection in the boa formMapDelDevice macstr function. Attackers can exploit it by sending specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary code...

DrayTek Vigor2960: Input validation error vulnerability

The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a security vulnerability. This vulnerability stems from the operation of the settable function in the /cgi-bin/mainfunction.cgi file of the CGI Process component, which may lead to remote command injection...

TOTOLINK X2000R Command Injection Vulnerability

TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formWizard newPass function. Special HTTP requests may lead to arbitrary code execution...

ArmorX Global ArmorX Spam: Input validation error vulnerability

The ArmorX Global ArmorX versions prior to 8.15.2-3.282.133-1.90.061 have a vulnerability in input validation. This vulnerability stems from command injection; authenticated remote attackers can inject custom commands into specific parameters, thereby uploading malicious code to the server...

Python Packaging Authority virtualenv command injection vulnerability

The Python Packaging Authority’s virtualenv versions prior to 21.14.9 have a command injection vulnerability. This vulnerability arises from the prompt text provided by the caller potentially becoming executable syntax in the bash activation prompt, which can lead to command injection...

Vite launch-editor command injection vulnerability

Vite launch-editor has a command injection vulnerability. This vulnerability arises when an attacker can create file system entries in the working directory that start with a plus sign or minus sign. In such cases, launch-editor does not enforce the path as a positional file name. As a result, th...

Vulnerability related to improper handling of virtualenv output by Python Packaging Authority

A security vulnerability exists in Python Packaging Authority virtualenv versions prior to 21.14.2. This vulnerability arises because FishActivator inherits from ViaTemplateActivator.quote and calls POSIX shlex.quote. However, fish interprets backslashes and single quotes differently. Attackers c...

Python Packaging Authority virtualenv command injection vulnerability

The Python Packaging Authority’s virtualenv version 20.26.6 to 21.14.2 contains a security vulnerability. This vulnerability stems from ViaTemplateActivator.instantiatetemplate, which replaces placeholders in the activation template on a per-key basis. As a result, names such as VIRTUALNAME,...

Vite launch-editor command injection vulnerability

Versions of launch-editor prior to 2.14.2 have a command injection vulnerability. This vulnerability arises from launch-editor-middleware removing the row and column suffixes before the existsSync check when processing Windows file parameters controlled by attackers. As a result, parameters pass...

Python Packaging Authority virtualenv command injection vulnerability

The Python Packaging Authority’s virtualenv versions prior to 21.14.9 have a command injection vulnerability. This vulnerability stems from the fact that when generating POSIX console scripts, the interpreter path is passed to distlib ScriptMaker without proper referencing. When the path contains...

Coze-Dev and Coze-Studio: Configuration error vulnerabilities

Versions of coze-dev and coze-studio before 0.5.0 have a configuration error vulnerability. This vulnerability stems from insecure default configurations, allowing any registered user to execute commands in unshaded Python3 subprocedures by running workflow code nodes. Attackers can bypass the...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formUpload function. Authorized attackers can execute arbitrary code through specially crafted HTTP requests...

DrayTek Vigor2960: Input validation error vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from the incorrect handling of parameters in the option field of the ruequestcertificate function in the /cgi-bin/mainfunction.cgi file within the IPsec Handler component. This could lead to remote...

JD JoySafeter: Vulnerabilities in permission management and access control mechanisms

JD JoySafeter versions 1.0.0 and earlier have vulnerabilities related to permission licensing and access control. These vulnerabilities arise from the execute tool in Copilot’s standard mode not implementing sandbox isolation. After authenticated users select the standard mode in the WebSocket...

Exploit for CVE-2024-58299

Description This pull request addresses a security vulnerabil...

Exploit for CVE-2026-16723

FastJson 1.2.83 GenProbe2 Purpose: Used to reproduce the...

CLSA-2026-1792423910 ImageMagick: Fix of CVE-2026-109275

CVE-2026-109275: fix PostScript command injection via an unvalidated font name in RenderPostscript...

CLSA-2026-1792422501 Fix CVE(s): CVE-2026-105840, CVE-2026-105841, CVE-2026-105842

SECURITY UPDATE: absolute path names accepted in restricted mode - debian/patches/CVE-2026-105840.patch: reject absolute path names in restricted mode in checkpath in src/lrz.c and wcs in src/lsz.c, not only in PUBDIR builds - CVE-2026-105840 SECURITY UPDATE: command injection via the pipe mode -...

CVE-2026-109432 Camunda Expression Injection via orQueries RCE

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated users to bypass the...

CVE-2026-109432 Camunda Expression Injection via orQueries RCE

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated users to bypass the...