28062 matches found
Gogs operating system command injection vulnerability
Gogs Go Git Service is a Go-based self-service Git hosting service developed by the Gogs team. It supports creating and migrating public/private repositories, as well as adding and removing repository collaborators. Gogs versions 0.13.3 and earlier had an operating system command injection...
Low Photon OS Security Update - PHSA-2026-5.0-91-0757
Updates of 'libtiff' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-91-0756
Updates of 'expat' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-91-0752
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Claude Code: Operating System Command Injection Vulnerability
Claude Code is an open-source terminal-native AI programming tool developed by Anthropic. Versions of Claude Code prior to 2.0.57 contained a vulnerability related to operating system command injection. This vulnerability arose from an inability to properly validate directory changes in conjuncti...
Important Photon OS Security Update - PHSA-2026-5.0-0756
Updates of 'expat' packages of Photon OS have been released...
Claude Code: Operating System Command Injection Vulnerability
Claude Code is an open-source terminal-native AI programming tool developed by Anthropic. Versions of Claude Code prior to 2.0.55 contained a vulnerability related to operating system command injection. This vulnerability stemmed from insufficient validation of commands that utilized the echo...
Huawei HarmonyOS security vulnerabilities
Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from a concurrency issue in the graphical module’s reutilization...
NTFS Heap Buffer Overflow DoS
The vulnerability of the ntfsnew inode function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
Linux UFS Host Controllers DoS
The vulnerability of the ufsqcomsuspend function in the drivers/ufs/host/ufs-qcom.c file, which supports UFS-host controllers in Linux operating systems, is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a system failure...
JFS File System Heap Buffer Overflow DoS
The vulnerability of the txInit function in the fs/jfs/jfstxnmgr.c file of the Linux file system’s JFS kernel involves incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Juniper Junos OS Vulnerability (JSA100096)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA100096 advisory. - An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high...
OpenProject operating system command injection vulnerability
OpenProject is an open-source web-based project management software. Versions of OpenProject prior to 16.6.7 and 17.0.3 had a vulnerability related to operating system command injection. This vulnerability stemmed from an arbitrary file writing vulnerability present in the repository modification...
Security Bulletin: AIX/VIOS is vulnerable to denial of service and possible code execution due to Perl (WS-2025-0004)
Summary Vulnerability in Perl could allow an attacker to cause a denial of service or possibly execute code WS-2025-0004. AIX uses Perl in various operating system components. Vulnerability Details ID:WS-2025-0004 DESCRIPTION: Fix a class of false positives where input should have been rejected...
CVE-2026-25139
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. In version 2025.10 and prior, multiple out-of-bounds read allow any unauthenticated user, with ability to send or manipulate input packets, to...
CVE-2025-15312 Tanium addressed an improper output sanitization vulnerability in TanOS.
Tanium addressed an improper output sanitization vulnerability in Tanium Appliance...
CVE-2025-15312
CVE-2025-15312 describes an improper output sanitization vulnerability in Tanium Appliance (TanOS family) that affects output handling in the affected component. The public records consistently cite “improper output sanitization” as the root cause, with CVSS metrics indicating high impact to conf...
OS Command Injection
Apache HTTP Server is vulnerable to OS Command Injection. The vulnerability is due to improper handling of shell-escaped query strings when Server Side Includes SSI with exec cmd="..." are used alongside modcgid, which allows an attacker to inject and execute arbitrary system commands by crafting...
CVE-2025-11730
A post‑authentication command injection vulnerability in the Dynamic DNS DDNS configuration CLI command in Zyxel ATP series firmware versions from V5.35 through V5.41, USG FLEX series firmware versions from V5.35 through V5.41, USG FLEX 50W series firmware versions from V5.35 through V5.41, and...
