CVE-2026-93674

Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a critical remote code execution (RCE) flaw (CVE-2026-93674 ). The root cause is the improper neutralization of special elements used in an OS command (CWE-94), which allows a remote attacker to execute arbitrary code. This vulnerabilit...

CVE-2026-97674

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Code Injection vulnerability (CVE-2026-97674 ). Due to the improper neutralization of special elements used in an OS command, a remote authenticated attacker could execute arbitrary OS commands. This flaw is categorized under CWE-94...

CVE-2024-29269

CVE-2024-29269 Que permite la ejecución de comandos del sistema operativo sin autenticación en routers TLR-2005KSH. Este exploit aprovecha la vulnerabilidad para ejecutar comandos arbitrarios en los routers afectados. Dork ZoomEye :- title:"Login to TLR-2005KSH" Fuente:...

CVE-2026-102160

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-102160 Security Advisory 0190

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-102160

An OS command injection vulnerability exists in CloudVision CUE backup management . This flaw allows an authenticated Super User to submit a crafted backup request to execute arbitrary commands with the privileges of the affected service. The vulnerability is associated with CWE-78 (Improper Neut...

EUVD-2026-93957

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-102160 Security Advisory 0190

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...

CVE-2026-48030

CVE-2026-48030 — Inyección de comandos del sistema operativo en Pheditor Resumen Campo| Detalles ---|--- ID de CVE| CVE-2026-48030 Producto| pheditor Proveedor| Hamid Samak Versiones afectadas| 2.0.1, 2.0.2, 2.0.3 Versión parcheada| 2.0.4 Severidad| Crítica Puntuación CVSS| 9.9 Vector CVSS|...

CVE-2022-30525

CVE-2022-30525 Una vulnerabilidad de inyección de comandos del sistema operativo en el programa CGI de Zyxel Resumen ejecutivo La vulnerabilidad, descubierta por primera vez el 13 de abril de 2022, causó ejecución remota de código en los productos de firewall de Zyxel. Esta importante...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - Inyección de comandos del sistema operativo Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE_2024_20356

CVE-2024-20356 Esta es una prueba de concepto para CVE-2024-20356, una vulnerabilidad de inyección de comandos en Cisco CIMC. Escrito por Aaron y oxidado por SherllyNeo Los detalles técnicos completos se pueden encontrar en...

EUVD-2026-93575

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center (versions prior to 3.7.0 ) is vulnerable to an OS Command Injection vulnerability (CWE-78). A low-privileged attacker with remote access could exploit this flaw to achieve Remote Execution , potentially gaining SYSTEM privileges on t...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2022-30525_Exploit

CVE-2022-30525 Inyección remota de comandos en firewall Zyxel Un exploit basado en Python para CVE-2022-30525 Resumen de la vulnerabilidad NIST Una vulnerabilidad de inyección de comandos del sistema operativo en el programa CGI de las versiones de firmware 5.00 hasta 5.21 Patch 1 ambas incluidas...

CVE-2024-29269-RCE

🚀 CVE-2024-29269 漏洞利用工具 此仓库包含针对 CVE-2024-29269 漏洞的利用代码，该漏洞允许在 TLR-2005KSH 路由器上实现未经身份验证的操作系统命令执行。此漏洞利用工具利用该漏洞在受影响的路由器上执行任意命令。 ✨ 功能特性 🔄 交互模式：在单个 URL 上交互式执行命令。 📂 批量模式：从文件中扫描多个 URL。 📝 将结果输出到文件。 📊 进度条：跟踪批量扫描的进度。 📦 安装 安装依赖 克隆仓库并使用 pip 安装所需包： git clone https://github.com/hack-with-rohit/CVE-2024-29269-R...

CVE-2022-30525_check

CVE-2022-30525check 描述： 该脚本用于检查运行固件版本5.00至5.21 Patch 1的Zyxel USG FLEX设备中是否存在操作系统命令注入漏洞CVE-2022-30525。该漏洞允许攻击者在易受攻击的设备上修改特定文件并执行操作系统命令。 使用说明： 确保系统已安装Python 3 下载脚本并保存到本地计算机 打开命令提示符或终端窗口，并导航到脚本保存的目录 使用以下命令运行脚本："python CVE-2022-30525.py -t TARGETURL" 将TARGETURL替换为您要检查的Zyxel USG FLEX设备的URL...

Vulnerability-CVE-2025-64446-CVE-2025-58034

Simulación de explotación de FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Este documento es solo para fines educativos y de investigación en seguridad. No lo utilice para atacar sistemas sin autorización. 1. Resumen FortiWeb es un dispositivo Web Application Firewall WAF utilizado para proteger...