8016 matches found
CVE-2025-0107 Expedition: OS Command Injection Vulnerability
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...
CVE-2025-0107
CVE-2025-0107 – Palo Alto Networks Expedition OS command injection . The connected templates confirm an OS command injection in Palo Alto Networks Expedition that allows an unauthenticated attacker to execute arbitrary OS commands as the www-data user, leading to disclosure of usernames, cleartex...
CVE-2024-12847 NETGEAR DGN setup.cgi OS Command Injection
NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited ...
CVE-2024-12847 NETGEAR DGN setup.cgi OS Command Injection
NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited ...
CVE-2024-12847
The vulnerability CVE-2024-12847 affects NETGEAR DGN1000 routers (prior to firmware version 1.1.00.48). The issue is an authentication bypass in the setup.cgi endpoint that lets a remote, unauthenticated attacker execute arbitrary OS commands as root. Impact is described as remote command executi...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
CVE-2024-57687
CVE-2024-57687: OS Command Injection in PHPGurukul Land Record System v1.0. Vulnerable in /landrecordsys/admin/dashboard.php via the Cookie parameter, enabling remote code execution. CVSSv3.1 base score 9.8 (CRITICAL), network attack vector, no user interaction required. Exploitation status is no...
CVE-2024-57687
An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "Cookie" GET request parameter...
CVE-2024-43655 Any authenticated users can execute OS commands as root using the <redacted>.sh CGI script.
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – The attacker will first need to find the name of the...
Exploit for OS Command Injection in Aviatrix Controller
CVE-20...
PT-2025-1076
Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition versions 1.2.101 and earlier Description An OS command injection issue exists in Palo Alto Networks Expedition. This allows an unauthenticated attacker to execute arbitrary OS commands as the www-data user...
CVE-2024-50603
CVE-2024-50603 in Aviatrix Controller (versions < 7.1.4191 for 7.1.x and
Aviatrix Controller 操作系统命令注入漏洞
Aviatrix Controller is a software application from Aviatrix USA. Extend and control the native fabric with cloud provider APIs to extend its functionality and integrate it into the software. A security vulnerability exists in Aviatrix Controller versions prior to 7.1.4191 and 7.2.x prior to...
GO-2024-3359 GoCast OS Command Injection vulnerability in github.com/mayuresh82/gocast
GoCast OS Command Injection vulnerability in github.com/mayuresh82/gocast...
VulnCheck KEV: CVE-2024-50603
Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloudtype for listflightpathdestinationinstances, or srccloudtype for flightpathconnectiontest...
PT-2025-1324
Name of the Vulnerable Software and Affected Versions Linksys E1000 versions prior to 2.1.03 Linksys E1200 versions prior to 2.0.05 Linksys E3200 versions prior to 1.0.05 Description OS command injection is possible via shell metacharacters in the ping ip parameter of the 'apply.cgi' endpoint on...
CVE-2024-12970
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...
CVE-2024-12970 OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...
CVE-2024-12970 OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...