27293 matches found
CVE-2026-34110
Guardian language-system passes the id GET parameter directly into a PHP exec call in complexstart.php line 14 without sanitization: exec"php jobs/complex.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell metacharacters...
CVE-2026-34117
Guardian Language-System is affected by CVE-2026-34117 due to a vulnerability in text_to_subtitles.php where the id GET parameter is passed directly into PHP exec() without sanitization. This allows an unauthenticated, remote attacker to append shell metacharacters and execute arbitrary OS comman...
CVE-2026-34113 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech_text.php
Guardian language-system passes the id GET parameter directly into a PHP exec call in speechtext.php line 18 without sanitization: exec"php jobs/speechaudiotext.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell...
CVE-2026-34110
The CVE describes an unauthenticated OS command injection in Guardian language-system: complex_start.php passes the id GET parameter directly into exec("php jobs/complex.php ..."), unsafely incorporating $_GET['id'] without sanitization. This allows an unauthenticated attacker to append shell met...
CVE-2026-34108 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.php
Guardian language-system passes the id GET parameter directly into a PHP exec call in text.php line 15 without sanitization: exec"php jobs/text.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute...
CVE-2026-34107 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php
Guardian language-system passes the id GET parameter directly into a PHP exec call in translate.php line 14 without sanitization: exec"php jobs/translate.php ".$loginsession." ".$GET'id'." ...". No authentication is required. An unauthenticated remote attacker can append shell metacharacters...
EUVD-2026-41048
JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by supplying a malicious Wireless parameter to the HTTP PUT NetSDK/Factory SetMAC endpoint. Attackers can craft a...
GHSA-V6HV-5RRM-2F28 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-7JCF-W576-JVJ3 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-P5JC-239C-PVVF vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-CH5V-H69F-MXC8 vulnerabilities
Vulnerabilities for packages: expat...
GHSA-WH64-WF5G-W6PR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QG2W-2FJ8-QPW3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QRQ7-GPW3-H474 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11036 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C3JF-FPGM-J5MM vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-12725 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9886-CQJQ-QRVC vulnerabilities
Vulnerabilities for packages: chromium...
