CVE-2026-93966

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...

CVE-2026-93966 aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...

EUVD-2026-83659

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...

SharkNinja Robot Vacuum AWS IoT Exec_Command RCE

Remote command execution on SharkNinja internet-connected robot vacuums via AWS IoT Core MQTT device shadows. A misconfigured device certificate can authenticate to the regional broker and publish desired.ExecCommand to $aws/things//shadow/update; appd executes the string with popen. Requires...

Design/Logic Flaw

The execcommand function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute...

CVE-2012-2085

CVE-2012-2085 affects Gajim prior to 0.15. The vulnerability is in the exec_command function (common/helpers.py) and allows user‑assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute. Public references (NVD/OpenVAS/other advisories) confirm the issu...

CVE-2012-2085: Improper Control of Generation of Code

The execcommand function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute...