CVE-2025-69212

CVE-2025-69212: OpenSTAManager 在 P7M 文件处理中存在 OS 命令注入 概述 字段| 详情 ---|--- CVE ID| CVE-2025-69212 严重程度| 严重 公告| 查看公告 发现者| Lukasz Rybak 受影响产品 devcode-it/openstamanager 版本: file; // $name 来自用户输入！ 攻击流程： 1. 攻击者创建包含恶意文件名的 ZIP 压缩包 2. 通过...

NUUO Camera <=20250203 - OS Command Injection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. id: CVE-2025-1338 info: name: NUUO Camera =20250203 - OS Command Injection author: Ark...

Wavlink WN535K2/WN535K3 - OS Command Injection

Wavlink WN535K2 and WN535K3 routers are susceptible to OS command injection which affects unknown code in /cgi-bin/nightled.cgi via manipulation of the argument starthour. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised syste...

Group-Office < 26.0.5 - Remote Code Execution

Group-Office before versions 6.8.150, 25.0.82, and 26.0.5 is vulnerable to remote code execution via OS command injection. The endpoint email/message/tnefAttachmentFromTempFile directly concatenates the user-controlled parameter tmpfile into an exec call. By injecting shell metacharacters into...

Blue Angel Software Suite (5V Technologies) - OS Command Injection

Blue Angel 5V Technologies Blue Angel Software Suite through 20230920, as used in Analog Telephone Adapter ATA and Voice over IP VoIP devices, allows remote authenticated attackers to execute arbitrary OS commands as root via shell metacharacters in the pingaddr parameter to...

WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command Injection

AVideo 7.0 contains a command injection caused by shell command substitution in the base64Url GET parameter, letting unauthenticated attackers execute arbitrary OS commands, exploit requires no authentication. id: CVE-2026-29058 info: name: WWBN AVideo Encoder 7.0 - Unauthenticated OS Command...

Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code

Langflow = 1.2.x exposes POST /api/v1/validate/code without any authentication. The endpoint calls validatecode which execs user-supplied Python code. Default-argument expressions in Python execute at function-definition time, allowing arbitrary OS command execution without authentication. id:...

Chaosblade < 1.7.4 - Remote Code Execution

exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication. id: CVE-2023-47105 info: name: Chaosblade 1.7.4 - Remote Code Execution author: s4e-io severity: high description: | exec.CommandContext in...

WeiYe-Jing datax-web <= 2.1.2 - OS Command Injection

A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection...

Pheditor 2.0.1-2.0.3 - OS Command Injection

Pheditor 2.0.1 to - 2.0.4 contains an OS command injection caused by improper sanitization of the 'dir' POST parameter in the terminal action handler, letting authenticated users execute arbitrary OS commands with web server privileges. id: CVE-2026-48030 info: name: Pheditor 2.0.1-2.0.3 - OS...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 概念验证利用——Apache HugeGraph Server 中的 RCE 未认证用户可通过 Groovy 注入在 Apache HugeGraph Server 上执行操作系统命令。 使用 🛠 攻击多个目标 ☣️ python3 CVE-2024-27348.py -f targets.txt -c "command to execute" 攻击单个目标 🗡 python3 CVE-2024-27348.py -t http://target.tld:8080 -c "command to execute" 参数 🧰 参数...

CVE-2023-33381-MitraStar-GPT-2741GNAC

CVE-2023-33381-MitraStar-GPT-2741GNAC CVE-2023-33381：MitraStar GPT-2741GNAC 上的操作系统命令注入 设备：GPT-2741GNAC 固件版本：ARg5.8110WVN0b72 漏洞描述： 通过 SSH 登录后，我立即注意到可用命令和选项的有限集合。很明显，我确实被限制在一个受限的 shell 环境中。 在探索了几种已知漏洞后，我决定深入挖掘新的漏洞。首先，我登录了管理门户，并开始测试各种可能导致操作系统命令注入的功能。在诊断菜单中，我遇到了一个特殊功能，它允许我使用 ping 和 traceroute 命令测试连通...

CVE-2026-58457

CVE-2026-58457 - Inyección de comandos del sistema operativo no autenticada en el repetidor Wi-Fi Shenzhen Aitemi M300 !WARNING Este código se proporciona tal cual, únicamente con fines educativos y de investigación. No utilice este PoC en sistemas de producción, entornos compartidos ni en...

CVE-2026-105487

The yogeshojha reNgine software (versions up to 2.2.0 ) is vulnerable to an OS command injection vulnerability within the listTargets Endpoint . Specifically, the subdomain_discovery function located in the web/reNgine/tasks.py file fails to properly neutralize the Name argument. This flaw allows...

CVE-2026-105487 yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomaindiscovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched...

EUVD-2026-92917

A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomaindiscovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched...

EUVD-2026-92908

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652B20230116. The impacted element is the function firmwarecheck of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument filename leads to os command injection. The attack...

CVE-2026-105484 TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection

A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652B20230116. The impacted element is the function firmwarecheck of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of the argument filename leads to os command injection. The attack...

CVE-2026-105484

The TOTOLINK X6000R running firmware version 9.4.0cu.652_B20230116 is vulnerable to an OS command injection vulnerability. The flaw exists within the UploadFirmwareFile Handler component, specifically in the firmware_check function of the /cgi-bin/cstecgi.cgi file. An attacker can exploit this by...

CVE-2025-71384

The Dbit WIFI4 N300 1.0.0 devices are vulnerable to a stack-based buffer overflow within the /api/addStaticDHCP comment field. This flaw allows an administrator connected to the local Wi-Fi network to achieve remote code execution (RCE) by executing arbitrary OS commands. No specific remediation ...