The vulnerability of the microprogrammed software of the Aitemi M300 wireless signal amplifiers (MT02) is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows a hacker to execute arbitrary code.

The vulnerability of the microprogrammed software of Aitemi M300 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...

Moderate Photon OS Security Update - PHSA-2026-5.0-91-0771

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

exiftool 操作系统命令注入漏洞

Exiftool is an open-source application developed by ExifTool. It makes metadata more accessible. Versions of Exiftool 13.49 and earlier had a vulnerability related to operating system command injection. This vulnerability stemmed from the SetMacOSTags function in the PNG file parser component,...

CVE-2026-3040

CVE-2026-3040 affects DrayTek Vigor 300B (up to version 1.5.1.6) in the Web Management Interface, specifically the cgiGetFile function in /cgi-bin/mainfunction.cgi/uploadlangs. The File argument manipulation leads to OS command injection. Reports indicate remote initiation is possible and that an...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.5)

The version of AOS installed on the remote host is prior to 7.3.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.5 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library...

CVE-2026-2944 Tosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injection

A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP POST Request Handler. Performing a manipulation of the argument DevId results in os command injection. The attack ma...

Vaelsys V4 操作系统命令注入漏洞

Vaelsys V4 is an artificial intelligence video analysis platform developed by the Spanish company Vaelsys. Version 4.1.0 of Vaelsys V4 contains a vulnerability related to operating system command injection. This vulnerability stems from incorrect handling of the parameter xajaxargs in the...

Photon OS 5.0: Linux PHSA-2026-5.0-0770

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0770. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-27487 OpenClaw: Prevent shell injection in macOS keychain credential write

OpenClaw is a personal AI assistant. In versions 2026.2.13 and below, when using macOS, the Claude CLI keychain credential refresh path constructed a shell command to write the updated JSON blob into Keychain via security add-generic-password -w .... Because OAuth tokens are user-controlled data,...

OpenClaw 操作系统命令注入漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an operating system command injection vulnerability. The vulnerability stems from a keychain credential refresh shell command constructed on macOS failing to properly filter constructed command special...

CVE-2026-2818

A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction directory. This vulnerability appears to be susceptible on Windows OS only...

CVE-2026-2847

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument IspName results in os command injection. The attack can be launched remotely. The explo...

PT-2026-21022

Name of the Vulnerable Software and Affected Versions EnOcean SmartServer IoT versions prior to 4.60.009 Description A flaw exists that could allow remote attackers to cause a memory leak. This can occur by sending specially crafted IP-852 messages within LON IP-852 management messages...

The vulnerability of the ath11kpci_write32() function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath11kpciwrite32 function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker t...

Liquid Prompt 操作系统命令注入漏洞

Liquid Prompt is an open-source prompt tool developed by Liquid Prompt. Liquid Prompt has a vulnerability related to operating system command injection. This vulnerability arises from command injection when processing specially crafted branch names, which may lead to code execution...

CVE-2021-35402

PROLiNK PRC2402M 20190909 before 2021-06-13 allows liveapi.cgi?page=satellitelist OS command injection via shell metacharacters in the ip parameter for satellitestatus...

PT-2026-21285

Name of the Vulnerable Software and Affected Versions PROLiNK PRC2402M versions prior to 2021-06-13 Description The PROLiNK PRC2402M router firmware contains a flaw that allows for arbitrary OS command execution. The issue resides in the live api.cgi script when handling the page=satellite list...

AIX : Multiple Vulnerabilities (IJ57162)

The version of AIX installed on the remote host is prior to APAR IJ57162. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57162 advisory. - A flaw was identified in the X.Org X server's X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap...

The vulnerability of the tgl_get_bw_info() function in the drivers/gpu/drm/i915/display/intel_bw.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the tglgetbwinfo function in the drivers/gpu/drm/i915/display/intelbw.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause ...

CVE-2026-26320

OpenClaw is a personal AI assistant. OpenClaw macOS desktop client registers the openclaw:// URL scheme. For openclaw://agent deep links without an unattended key, the app shows a confirmation dialog that previously displayed only the first 240 characters of the message, but executed the full...