Lucene search
+L

8987 matches found

EUVD
EUVD
added 2026/09/11 2:42 p.m.11 views

EUVD-2026-76125

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

7.8CVSS0.00481EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 2:42 p.m.14 views

CVE-2026-8301

CVE-2026-8301 is an OS Command Injection vulnerability in TUBITAK BILGEM's Pardus Boot Repair , caused by improper neutralization of special elements in an OS command. The issue affects versions before 1.0.8 . The CNA-assigned CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector , low privil...

7.8CVSS0.00481EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 7:21 a.m.6 views

CVE-2026-22226

CVE-2026-22226 Proof of Concept for CVE-2026-22226 Authenticated LAN-side OS Command Injection in the VPN Client of TP-Link Archer Wi-Fi routers Vulnerability brief The VPN Client controller stores the user-controlled entry description des in the UCI configuration with a weak validation regex. Wh...

8.5CVSS7.6AI score0.02511EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.128 views

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

9.8CVSS8.1AI score0.91881EPSS
SaveExploits14References5
Kitploit
Kitploit
added 2026/09/11 5:18 a.m.5 views

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure Detector A non-intrusive detection script for SonicWall Secure Mobile Access SMA 1000 series appliances affected by CVE-2026-83548 pre-auth SSRF in the Work Place interface, CVSS 10.0 and CVE-2026-83549 post-auth OS command injection i...

10CVSS8.5AI score0.08505EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/11 1:20 a.m.4 views

FORTIWEB_CVE-2025-64446-58034

Simulación de explotación de FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Este documento es solo para fines educativos y de investigación de seguridad. No lo utilice para atacar sistemas sin autorización. 1. Resumen FortiWeb es un dispositivo Web Application Firewall WAF utilizado para proteger...

9.8CVSS7.8AI score0.91838EPSS
SaveExploits21
EUVD
EUVD
added 2026/09/11 12:31 a.m.9 views

EUVD-2026-75766

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00752EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 12:31 a.m.9 views

EUVD-2026-75769

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00541EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 12:31 a.m.9 views

EUVD-2026-75765

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00439EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 12:31 a.m.9 views

EUVD-2026-75774

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00541EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 12:07 a.m.6 views

CVE-2026-26832

CVE-2026-26832: OS command injection in node-tesseract-ocr Summary node-tesseract-ocr through version 2.2.1 allows OS command injection in recognize in src/index.js. The package builds a shell command string and executes it with childprocess.exec. Because the input path is only wrapped in double...

9.8CVSS8.2AI score0.01706EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 11:32 p.m.6 views

CVE-2020-8958

A proof of concept for CVE-2020-8958 written in Python. The script will return the contents of /etc/passwd if successful. CVE-2020-8958 Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS...

9CVSS7.2AI score0.46642EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 11:25 p.m.6 views

CVE-2026-26830

CVE-2026-26830: OS command injection in pdf-image Summary pdf-image through version 2.0.0 allows OS command injection via the pdfFilePath argument. The package builds shell command strings with util.format and executes them with childprocess.exec. If an application passes an attacker-controlled...

9.8CVSS5.9AI score0.02493EPSS
SaveExploits4
Cvelist
Cvelist
added 2026/09/10 11:14 p.m.36 views

CVE-2026-17176 OS command injection Vulnerability in Deco BE11000

An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution...

7.7CVSS0.03593EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 11:14 p.m.33 views

CVE-2026-17176

TP-Link Deco BE11000 is affected by an OS command injection vulnerability in its TDDP module . An attacker on the adjacent network can exploit this by sending a crafted UDP packet , executing arbitrary commands with root privileges without any prior authentication. Successful exploitation may lea...

7.7CVSS0.03593EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 10:58 p.m.7 views

CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address" In the background the ping extension is using the command prompt of Windows to perform the ping. The input field for the Test Target Host is also 1024 chars long. After th...

9.8CVSS6AI score0.01917EPSS
SaveExploits3References1
Github Security Blog
Github Security Blog
added 2026/09/10 10:34 p.m.11 views

@argos-ci/core: CI Branch Name OS Command Injection

CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...

7.5CVSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/09/10 10:17 p.m.8 views

CVE-2026-82098

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00752EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 10:17 p.m.8 views

CVE-2026-82095

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00541EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 10:17 p.m.8 views

CVE-2026-82099

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

8.8CVSS0.00439EPSS
SaveExploits0References1
Rows per page
Query Builder