Radare2 processing logic error vulnerability

Radare2 versions 6.2.0 and 6.2.2 have a processing logic vulnerability. This vulnerability stems from the operation of the rcorecmdstrpipe function in the libr/core/rtrhttp.inc.c library within the HTTP Sandbox Policy Handler component. This operation causes the protection mechanism to fail,...

GeoVision GV-ASManager command injection vulnerability

The GeoVision GV-ASManager 6.3.0 version has a command injection vulnerability. This vulnerability stems from the default web server connection port of the GeoWebServer.exe process, which allows for OS command injection, potentially enabling the execution of arbitrary commands...

Camunda 7 command injection vulnerability

Camunda 7 versions from 7.24.0 to 7.24.14, as well as versions from 7.23.0 to 7.23.17, have security vulnerabilities. These vulnerabilities stem from a flaw in AdhocQueryValidator.validate, which fails to check the subquery expression mappings exposed in the orQueries field of TaskQueryDto. This...

MLJAR mercury input validation error vulnerability

The MLJAR Mercury version 3.0.0 to 3.2.4 had a security vulnerability. This vulnerability stemmed from the lack of a comma in BLOCKEDPATTERNS, allowing the concatenation of /lab and/api/terminals regular expression literals. As a result, API/terminals requests bypassed the anonymous endpoint...

Satya-Vinay Events-Management-System Input Verification Vulnerability

Satya-Vinay Events-Management-System has a security vulnerability. This vulnerability stems from improper handling of parameters in the dodelete.php file within the Registration-Delete Handler component. It may lead to SQL injection attacks, and attackers could execute commands remotely...

BentoML command injection vulnerability

BentoML versions 1.4.39 and earlier have a command injection vulnerability. This vulnerability arises from the newline characters embedded in the docker.env mapping key being rendered by the old base.j2 template, thereby allowing them to be injected into Dockerfile commands. An attacker can provi...

FusionPBX Members: Command Injection Vulnerability

FusionPBX members running versions 5.4.4 and earlier, as well as 5.5.7 and earlier, and 5.6.5 and earlier, have a command injection vulnerability. This vulnerability stems from an unknown function in the Dialplan Editor component’s app/dialplans/resources/classes/dialplan.php file, which allows f...

Orbitale ImageMagickPHP command injection vulnerability

The Orbitale ImageMagickPHP version 3.3.5 and earlier have a command injection vulnerability. This vulnerability stems from the handling of the fontFile parameter in the Command::font function located in the src/Command.php file. It may lead to OS command injection, allowing attackers to execute...

Pillow command injection vulnerability

Pillow versions from 2.6.0 to 13.0.0 contain a command injection vulnerability. This vulnerability arises from parameter injection when calling Ghostscript to process EPS inputs. In EpsImagePlugin.Ghostscript, the input file name controlled by the attacker is passed after the -f parameter without...

H3C Magic NX15 Command Injection Vulnerability

The H3C Magic NX15 100R017 version has a command injection vulnerability. This vulnerability stems from an improper handling of the function sub416874 in the file /usr/bin/usrlist. It may lead to OS command injection, and can be exploited remotely by attackers...

CVE-2026-98828

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9kwmirspcallback removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that...

CVE-2026-98828

The Linux kernel contains a vulnerability in the ath9k wifi driver within the ath9k_wmi_rsp_callback() function. The root cause is that the function copies the number of bytes expected by a waiting command into a response buffer without sufficiently verifying the length of the device response. If...

CVE-2026-98828 wifi: ath9k: reject short WMI command responses

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9kwmirspcallback removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that...

CVE-2026-98828 wifi: ath9k: reject short WMI command responses

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9kwmirspcallback removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that...

EUVD-2026-103768

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9kwmirspcallback removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that...

CVE-2026-111876

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub...

EUVD-2026-103387

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub...

CVE-2026-111876 alexpasmantier television entry.rs output command injection

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub...

CVE-2026-111876

A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub...

CVE-2026-111876

A command injection vulnerability exists in alexpasmantier television up to version 0.15.9 . The flaw is located in the Entry::output function within the television/channels/entry.rs file. By manipulating the raw argument, a local attacker can execute arbitrary commands. The reported issue was cl...