EUVD-2026-88103

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...

CVE-2026-101007 aaPanel BaoTa Database Backup database.py InputSql os command injection

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...

CVE-2026-101007 aaPanel BaoTa Database Backup database.py InputSql os command injection

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit...

CVE-2026-101007

A vulnerability exists in aaPanel BaoTa up to version 11.8.0 , specifically within the Database Backup Handler component. The flaw is located in the InputSql function of the class/database.py file. By manipulating the Password argument, an attacker can achieve remote os command injection . Public...

CVE-2026-101002

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

CVE-2026-4480-POC

CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...

CVE-2026-101001

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

EUVD-2026-88084

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...

CVE-2026-101002

A security flaw exists in Netcore NBR200V2 version 1.3.241127.071246 . The vulnerability is located in the Tools Ping Handler component, specifically within the system function of the /usr/bin/network_tools file. By manipulating the url argument, an unauthenticated remote attacker can trigger an ...

CVE-2026-101001 Netcore NBR200V2 Web Management network_tools eval os command injection

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2026-101001 Netcore NBR200V2 Web Management network_tools eval os command injection

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

EUVD-2026-88083

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2026-101001

A critical os command injection vulnerability exists in the Web Management Interface of Netcore NBR200V2 1.3.241127.071246 . The flaw is located in the eval function of the /www/cgi-bin/network_tools file, where manipulation of the QUERY_STRING argument allows for remote attack execution. An expl...

CVE-2026-100896

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is...

CVE-2026-100896 TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is...

CVE-2026-100896

The TOTOLINK N150RT (version 3.4.0-B20201030) is vulnerable to OS command injection via its Web Management Interface . The root cause is the improper handling of the wlanif argument within the "function system" of the /boafrm/formWlSiteSurvey file. This flaw allows for remote exploitation , and p...

CVE-2026-100896 TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is...

CVE-2026-86102: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...