D-Link - Unauthenticated Remote Code Execution

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust Remote Support и PRA: RCE до аутентификации Обзор Критическая RCE-уязвимость до аутентификации в BeyondTrust Remote Support и Privileged Remote Access. Неаутентифицированный удалённый злоумышленник может выполнять команды ОС. Поле| Значение ---|--- CVE| CVE-2026-1731...

CVE-2023-6019

Внедрение команд ОС Ray RCEбез авторизации Использование: 1. nc -lvnp 4444 2. python3 cve-2023-6019.py -t 192.168.1.13 -p 80 -L 192.168.1.14 -P 80...

EUVD-2026-91838

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...

CVE-2026-105050

Versions of PeaZip prior to 11.3.0 are vulnerable to OS command injection when running in a non-default configuration. The root cause is the mishandling of the string "quotation character already used in the string" when processing a filename in an archive . Impacting the local system, this vulne...

CVE-2026-75937 OS Command Injection in Digi Accelerated Linux (DAL OS)

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...

CVE-2026-104019

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-104019

An OS command injection vulnerability exists in the Studio Space startup validation script of Amazon SageMaker Distribution (versions 2.x < 2.14.12, 3.x < 3.9.12, 4.0.x < 4.0.11, 4.1.x < 4.1.11, 4.2.x < 4.2.8, 4.3.x < 4.3.5, and 4.4.x

CVE-2026-104859 Nx: OS command injection in the @nx/docker release pipeline

Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.repositoryName and registryUrl...

CVE-2026-104859 Nx: OS command injection in the @nx/docker release pipeline

Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.repositoryName and registryUrl...

CVE-2026-104859 Nx: OS command injection in the @nx/docker release pipeline

Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image lookup, and docker push invocations as shell command strings. The release.docker.repositoryName and registryUrl...

CVE-2026-14802

CVE-2026-14802 Название уязвимого программного обеспечения и затронутые версии create-react-app версии до 5.0.2 Описание В macOS функция startBrowserProcess в файле openBrowser.js компонента react-dev-utils допускает внедрение команд операционной системы. Эта проблема позволяет удалённую...

CVE-2026-9645-ScadaBR-Analysis

CVE-2026-9645 — Анализ уязвимости ScadaBR Технический анализ уязвимости и брифинг по CVE для CVE-2026-9645 , затрагивающего платформу SCADA/HMI с открытым исходным кодом ScadaBR. Обзор CVE-2026-9645 — критическая уязвимость удалённого выполнения кода после аутентификации в ScadaBR. Согласно...

CVE-2026-63077

Обзор • Визуальная схема • Требования • Использование • Ограничения • Защита !CAUTION Этот PoC выполняет команду операционной системы и может изменять каталог приложения TeamCity. Используйте его только в изолированной лабораторной среде или против систем, на которые у вас есть явное письменное...

CVE-2026-22226

CVE-2026-22226 Доказательство концепции для CVE-2026-22226 Аутентифицированное внедрение OS-команд на стороне LAN в VPN-клиенте Wi-Fi-роутеров TP-Link Archer Краткое описание уязвимости Контроллер VPN-клиента сохраняет управляемое пользователем описание записи des в конфигурации UCI с помощью...