156926 matches found
CVE-2026-50523
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
CVE-2026-73682
CVE-2026-73682 affects Semaphore prior to version 2.18.20. The vulnerability is an OS command injection via the repository handling of git_url, allowing an authenticated project Manager or Owner to trigger remote code execution on the Semaphore server host by crafting a malicious git_url with git...
CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
EUVD-2026-58809
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
EUVD-2026-58808
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
CVE-2026-50523
CVE-2026-50523 : Microsoft PowerShell is affected by a vulnerability described as improper neutralization of special elements used in a command (command injection), allowing an authorized attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack ...
CVE-2026-50523
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
GHSA-3X6R-WXXG-53VV vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-XHF4-832V-7XCR vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71310 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-73651 vulnerabilities
Vulnerabilities for packages: redisinsight...
CVE-2026-71310 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-945V-V9P3-V5XW vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-CF44-9PGV-M4XC vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-H4MF-4V27-HGGJ vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-3X6R-WXXG-53VV vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-73680
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...