CVE-2026-7863 OS Command Injection in TUBITAK BILGEM's Pardus Software

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software allows OS Command Injection. This issue affects Pardus Software: before 1.0.5...

CVE-2026-7863

CVE-2026-7863 is an OS command injection vulnerability in TUBITAK BILGEM's Pardus Software (versions before 1.0.5 ), caused by improper neutralization of special elements used in an OS command. The vulnerability is reachable via a local attack vector with low complexity , requires no privileges a...

CVE-2026-8301

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

CVE-2026-89010

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

CVE-2026-89010 WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

EUVD-2026-76130

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

CVE-2026-8301 OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

EUVD-2026-76125

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

CVE-2026-8301

CVE-2026-8301 is an OS Command Injection vulnerability in TUBITAK BILGEM's Pardus Boot Repair , caused by improper neutralization of special elements in an OS command. The issue affects versions before 1.0.8 . The CNA-assigned CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector , low privil...

CVE-2026-22226

CVE-2026-22226 Prueba de concepto para CVE-2026-22226 Inyección de comandos del sistema operativo autenticada en el lado LAN en el cliente VPN de los routers Wi-Fi TP-Link Archer Resumen de la vulnerabilidad El controlador del cliente VPN almacena la descripción de la entrada controlada por el...

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 暴露检测器 一个非侵入式 检测脚本，用于检测受 CVE-2026-83548 （Work Place 接口中的预认证 SSRF，CVSS 10.0）和 CVE-2026-83549 （AMC 中的认证后 OS 命令注入，CVSS 7.8）影响的 SonicWall Secure Mobile Access SMA 1000 系列设备——这两个被积极利用的零日漏洞可被串联以实现未认证 RCE。 这是一个补丁状态 / 暴露检查 ，而非漏洞利用工具。它仅执行只读的 HTTPS GET 请求...

FORTIWEB_CVE-2025-64446-58034

FortiWeb 漏洞利用模拟 CVE-2025-64446 & CVE-2025-58034 注意： 本文档仅供学习与安全研究之用。 未经授权，切勿用于攻击系统。 1. 概述 FortiWeb 是一种用于保护 Web 应用程序的 Web 应用防火墙 WAF 设备。 2025 年，发现两个严重漏洞： CVE-2025-64446 – 通过路径遍历绕过身份验证 CVE-2025-58034 – 操作系统命令注入 2. CVE-2025-64446 概述 项目| 内容 ---|--- 漏洞类型| 相对路径遍历 身份验证绕过 原因| FortiWeb 在身份验证前未严格处理路径： -...

EUVD-2026-75766

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

EUVD-2026-75769

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

EUVD-2026-75765

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

EUVD-2026-75774

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-26832

CVE-2026-26832: Inyección de comandos del sistema operativo en node-tesseract-ocr Resumen node-tesseract-ocr hasta la versión 2.2.1 permite la inyección de comandos del sistema operativo en recognize en src/index.js. El paquete construye una cadena de comando de shell y la ejecuta con...

CVE-2020-8958

Pythonで書かれたCVE-2020-8958の概念実証です。このスクリプトは、成功すると/etc/passwdの内容を返します。 CVE-2020-8958 Guangzhou 1GE ONU V2801RW 1.9.1-181203から2.9.0-181024まで、およびV2804RGW 1.9.1-181203から2.9.0-181024までのデバイスでは、boaform/admin/formPingの宛先IPアドレスフィールドにシェルのメタ文字を入力することで、リモートの攻撃者が任意のOSコマンドを実行できます。 必要条件 Python 3.X bs4 使い方 python...

CVE-2026-26830

CVE-2026-26830: Inyección de comandos del sistema operativo en pdf-image Resumen pdf-image a través de la versión 2.0.0 permite la inyección de comandos del sistema operativo mediante el argumento pdfFilePath. El paquete construye cadenas de comandos shell con util.format y las ejecuta con...