Lucene search
+L

13596 matches found

Vulnrichment
Vulnrichment
•added 2026/08/24 5:07 p.m.•8 views

CVE-2026-71904 DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the eventcode field is concatenated into a system command. A remote attacker can trigger this vulnerabili...

8.6CVSS6AI score0.01783EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/24 2:17 p.m.•32 views

CVE-2026-76055

CVE-2026-76055 is an OS command injection in the package manager component of Black Duck blackduck-c-cpp prior to version 3.0.7. Filesystem paths encountered while traversing a scanned build directory are interpolated into shell command strings without quoting or escaping , allowing shell metacha...

7.5CVSS5.5AI score0.00186EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/24 2:17 p.m.•43 views

CVE-2026-76055

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

7.5CVSS0.00186EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/24 2:17 p.m.•14 views

EUVD-2026-64896

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

7.5CVSS5.5AI score0.00186EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/24 2:17 p.m.•13 views

CVE-2026-76055

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

7.5CVSS5.5AI score0.00186EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/08/24 1:29 p.m.•14 views

CVE-2026-62982

A flaw was found in Glances, an open-source system monitoring tool. The sanitizemustachedict function in glances/actions.py did not properly sanitize nested list and dictionary strings, specifically process command-line values. This allowed pipe characters to bypass the sanitization process and b...

8.8CVSS5.3AI score0.00197EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/08/24 11:55 a.m.•27 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...

8.9CVSS5.5AI score0.11736EPSS
SaveExploits9
GithubExploit
GithubExploit
•added 2026/08/24 10:33 a.m.•41 views

Exploit for OS Command Injection in Tenable Security_Center

C...

9.9CVSS5.8AI score0.09936EPSS
SaveExploits4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/08/24 7:21 a.m.•19 views

Sakura Editor vulnerable to OS command injection

Overview Sakura Editor provided by Sakura Editor Development Community has a functionality "Open Terminal". It does not neutralize the string which represents the current directory the directory where the editing file is located. OS command injection CWE-78 - CVE-2026-59561 Impact If a victim use...

8.4CVSS7.2AI score0.01086EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/24 5:16 a.m.•29 views

CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

8.4CVSS0.01086EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/24 4:50 a.m.•35 views

CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

8.4CVSS5.8AI score
SaveExploits0References5
CVE
CVE
•added 2026/08/24 4:50 a.m.•92 views

CVE-2026-59561

Sakura Editor , a text editor developed by the Sakura Editor Development Community, is affected by an OS command injection vulnerability. When a user is directed to edit a file located in a crafted directory and subsequently invokes the "Open Terminal" feature, an attacker may achieve arbitrary O...

8.4CVSS7.8AI score0.01086EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/24 4:50 a.m.•61 views

CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

8.4CVSS0.01086EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/24 4:50 a.m.•11 views

CVE-2026-59561

Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal"...

8.4CVSS7.7AI score0.01086EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/24 4:16 a.m.•26 views

CVE-2026-78211

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.02043EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/24 3:32 a.m.•19 views

EUVD-2026-64706

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS5.8AI score0.02043EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/24 3:32 a.m.•66 views

CVE-2026-78211 4MOSAn Security Technology|4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.02043EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/24 3:32 a.m.•69 views

CVE-2026-78211

4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...

9.8CVSS5.7AI score0.02043EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/24 3:32 a.m.•13 views

CVE-2026-78211 4MOSAn Security Technology|4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS5.7AI score0.02043EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/24 3:16 a.m.•19 views

CVE-2026-78177

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command...

4.5CVSS0.00904EPSS
SaveExploits0References5
Rows per page
Query Builder