CVE-2026-52806

Gogs RCE — Внедрение аргумента в git rebase CWE-88 Удаленное выполнение кода с аутентификацией на Gogs обрабатывается Git как флаг --exec, а не как позиционный аргумент, что приводит к выполнению sh -c после каждого воспроизведённого коммита во время rebase. Как работает эксплойт 1. Предварительн...

mediawiki-CVE-2026-100382

Lab 재현 - CVE-2026-100382 ExternalData OS 명령 주입 이 lab은 무엇인가 MediaWiki 1.43 공식 이미지, SQLite + ExternalData3.6.1 마지막 취약 버전, ../mediawiki-extensions-ExternalData에서 읽기 전용으로 마운트됨. 루프백 전용: 127.0.0.1:$HOSTPORT에 게시됨 기본값 8080. 익명 편집 + action=parse가 활성화됨 MediaWiki 기본값 - PoC는 로그인이 필요 없음. 실행 cd lab ./up.sh 설치,...

CVE-2026-8044

CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...

CVE-2026-8044

CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...

PT-2026-89083

CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...

CVE-2020-7496

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior formerly known as Vijeo XDwhich could cause unauthorized write access when opening the project file...

EUVD-2020-28621

Malware in sbrugna...

EUVD-2025-17408

Malicious code in bioql PyPI...

EUVD-2025-17403

Malicious code in bioql PyPI...

EUVD-2025-17401

Malicious code in bioql PyPI...

EUVD-2025-17400

Malicious code in bioql PyPI...

EUVD-2025-17412

Malicious code in bioql PyPI...

EUVD-2025-17399

Malicious code in bioql PyPI...

EUVD-2025-17398

Malicious code in bioql PyPI...

CVE-2025-3460

The Quantenna Wi-Fi chipset ships with a local control script, settxpow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument Injection'," and is estimated as a CVSS 7.7...

CVE-2025-35008

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...

CVE-2025-32459

The Quantenna Wi-Fi chipset ships with a local control script, routercommand.sh in the synctime argument, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument Injection'," and is estimated as a CVSS 7.7...

CVE-2025-35010

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

CVE-2025-35004

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument...

CVE-2025-35007

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...