301327 matches found
EUVD-2026-55233
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
CVE-2026-72573 4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
CVE-2026-72573
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
CVE-2026-72573 4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
CVE-2026-72573
CVE-2026-72573 describes an authenticated OS command injection in 4xmen/pm2panel (all versions). The vulnerability arises because the pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec('pm2 restart ' + id), without input validation or shell escaping, en...
CVE-2026-28672 Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8...
CVE-2026-28672
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8...
CVE-2026-28672 Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8...
CVE-2026-28672 Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8...
CVE-2026-28672
CVE-2026-28672 describes an OS Command Injection in Apache Ranger (via the UnixUserGroupBuilder username). The issue is caused by improper neutralization of special elements in user- or group-related processing, affecting Ranger releases 0.6 through 2.8. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S...
EUVD-2026-55254
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Ranger. This issue affects Apache Ranger: from 0.6 through 2.8...
Exploit for Heap-based Buffer Overflow in Postgresql
CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Ta...
IT threat evolution in Q2 2026. Non-mobile statistics
IT threat evolution in Q2 2026. Non-mobile statistics IT threat evolution in Q2 2026. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing...
IT threat evolution in Q2 2026. Mobile statistics
IT threat evolution in Q2 2026. Mobile statistics IT threat evolution in Q2 2026. Non-mobile statistics The mobile section of the quarterly cyberthreat report includes statistics on malware, adware, and potentially unwanted software for Android, as well as descriptions of the most notable threats...
Security Bulletin:Multiple security vulnerabilities in IBM Process Automation Manager Open Edition Starter Kit for Banking
Summary In addition to many updates of operating system level packages, Multiple vulnerabilities were addressed in IBM Process Automation Manager Open Edition Starter Kit for Banking -9.4.2 Vulnerability Details CVEID:CVE-2026-13676 DESCRIPTION: fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fai...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2026-11932 DESCRIPTION: IBM Security Verify Identity Access is vulnerable to a denial of service attack. CWE:CWE-835: Loop with Unreachable Exit...
CVE-2026-64654
A flaw was found in GitHub CLI gh. Multiple commands within the tool fail to neutralize terminal escape sequences when displaying externally controlled content. An attacker who can influence this content can embed malicious escape sequences. These sequences are then interpreted by a user's...
CVE-2026-66406
DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege...