295292 matches found
CVE-2026-19764 Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection
A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...
EUVD-2026-58558
A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...
CVE-2026-19764
CVE-2026-19764 affects Raisecom’s Command and Dispatch Management Platform up to version 7.6.5. The vulnerability is in an unknown part of /app/users/getpwd.php where manipulating the sip argument causes SQL injection. The issue is exploitable remotely and public exploit code exists. References d...
CVE-2026-19764
A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...
CVE-2026-19764 Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection
A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...
EUVD-2026-58478
AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...
PT-2026-71938
A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...
PT-2026-72099
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection...
PT-2026-72088
Name of the Vulnerable Software and Affected Versions MindsDB Minds Platform versions prior to 26.1.1 Description An unauthenticated remote code execution flaw allows attackers to execute arbitrary OS commands. The issue occurs when crafted prompts are submitted to the unprotected 'POST...
Debian dsa-6439 : zip - security update
The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6439 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6439-1 [email protected] https://www.debian.org/security/...
SAP NetWeaver OS Command Injection (3745182)
The version of the SAP NetWeaver kernel detected on the remote host is affected by an OS command injection vulnerability as referenced in SAP Security Note 3745182: - SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls...
PT-2026-71949
Name of the Vulnerable Software and Affected Versions Baicells EG3661M version BaiCE BQ6 2.0.5.3 NA Description An OS command injection flaw exists in the LuCI Web Interface component. A remote attacker can exploit this by manipulating the MaxHops, Timeout, or Size arguments within the...
PT-2026-72120
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to execute code locally. Recommendations At the moment,...
Linux Distros Unpatched Vulnerability : CVE-2026-73623
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.54 contains an incomplete denylist in unsafegitcloneoptions that omits --template, allowing attackers to achieve arbitrary command executio...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0284-1 Rating: important References: 1274759 Cross-References: CVE-2026-19556 CVE-2026-19557 CVE-2026-19558 CVE-2026-19559 CVE-2026-19560 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes ...
PT-2026-72105
Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote authenticated attackers can bypass security restrictions due to improper neutralization of special elements used in an SQL command, which may lead to SQL injection. SQL injection...
PT-2026-76577
Summary token-optimizer-mcp is vulnerable to OS command injection in the smart user tool. The get-user-info operation accepts a user-controlled username argument and later interpolates it into a shell command executed through execAsync: ts getent passwd "$username" || grep "^$username:" /etc/pass...
PT-2026-72103
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...
PT-2026-71969
A flaw was found in libdm. A remote attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...
MiracleLinux 9 : [security - high] ruby:4.0, ruby-4.0.3-33.module+el9+1172+b3ab8c11 (AXSA:2026-1542:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1542:01 advisory. ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via...