Lucene search
+L

15439 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•6 views

CVE-2025-45378: Improper Neutralization of Special Elements used in an OS Command

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials...

9.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•4 views

CVE-2025-61304: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address...

9.8CVSS5.8AI score0.01917EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
•added 2025/11/05 12:00 a.m.•14 views

CVE-2025-61304

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address...

5.8AI score0.01917EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•7 views

CVE-2025-64106: Improper Neutralization of Special Elements used in an OS Command

Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the...

8.8CVSS5.9AI score0.00395EPSS
SaveExploits0References1
Mend
Mend
•added 2025/11/03 4:35 p.m.•2 views

CVE-2025-11953

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

9.8CVSS8.4AI score0.9398EPSS
SaveExploits5References18
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•5 views

PT-2025-45662

The Metro Development Server, which is opened by the React Native CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

9.8CVSS8.4AI score0.9398EPSS
SaveExploits5References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•6 views

CVE-2025-11953: Improper Neutralization of Special Elements used in an OS Command

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

9.8CVSS8.4AI score0.9398EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2025/10/31 3:11 p.m.•16 views

CVE-2025-46422

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS7.2AI score0.00498EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/31 2:13 p.m.•19 views

CVE-2025-43940

Dell Unity, versions 5.5 and Prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS6.5AI score0.00575EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•8 views

CVE-2025-54763: Improper Neutralization of Special Elements used in an OS Command

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user who logs in to the Web UI of the product may execute an arbitrary OS command...

8.6CVSS7.3AI score0.0123EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 3:15 p.m.•21 views

CVE-2025-46423

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS0.00498EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/30 3:15 p.m.•16 views

CVE-2025-46422

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS0.00498EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/30 2:23 p.m.•21 views

CVE-2025-43942

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS0.00575EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/30 2:23 p.m.•31 views

CVE-2025-43942

Dell Unity OS has an OS Command Injection vulnerability (CVE-2025-43942) affecting Dell Unity versions 5.5 and earlier. The issue arises from improper neutralization of special elements in OS commands, allowing a low-privilege, locally-accessible attacker to achieve command execution and privileg...

7.8CVSS6AI score0.00575EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/10/30 2:19 p.m.•36 views

CVE-2025-46422

CVE-2025-46422 affects Dell Unity OS, with Dell Unity, version 5.5 and earlier, vulnerable to an OS Command Injection due to improper neutralization of special elements. A low-privileged, locally authenticated attacker can exploit this to run arbitrary commands with root privileges. Multiple sour...

7.8CVSS6.6AI score0.00498EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/30 2:19 p.m.•19 views

EUVD-2025-37006

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS6.7AI score0.00498EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/10/30 2:15 p.m.•16 views

CVE-2025-43940

Dell Unity, versions 5.5 and Prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS5.9AI score0.00575EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/10/30 2:15 p.m.•18 views

CVE-2025-43939

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS6AI score0.00575EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/30 2:14 p.m.•23 views

EUVD-2025-37007

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

7.8CVSS6.7AI score0.00498EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/30 2:10 p.m.•21 views

EUVD-2025-37010

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS6.2AI score0.00575EPSS
SaveExploits0References2
Rows per page
Query Builder