CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...

CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection (SSTI) . The vulnerability exists because the template engine can be manipulated into executing attacker-controlled code that bypasses built-in security checks. Specifically, if an application precompiles templates from a directory...

CVE-2026-94367

OpenEye Apex Network Video Recorder (NVR) firmware version 3.2.9.376 is vulnerable to an OS command injection in the recbackup component. An authenticated administrator can provide crafted backup-area configuration input that is passed to a shell command, enabling the execution of arbitrary comma...

CVE-2026-94367

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backup-area configuration input that is passed to a shell command, allowing commands to execute with the privileges of the nvr...

CVE-2026-16468

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection...

CVE-2026-16346

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2024-29269

CVE-2024-29269 Which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers. Dork ZoomEye :- title:"Login to TLR-2005KSH" Source:...

CVE-2026-17102

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to an OS command injection vulnerability (CVE-2026-17102 ). A remote authenticated attacker could exploit this by taking advantage of the improper neutralization of special elements used in an OS command, potentially leading to the executi...

CVE-2026-17102 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-16672 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-16672

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to remote code execution. A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in an OS command . The CVSS v3.1 score is 8.8 (High) , indicating significant impact o...

CVE-2026-16469 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-16469

The IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime is vulnerable to an issue where a remote authenticated attacker could execute arbitrary commands. This is caused by the improper neutralization of special elements used in an OS command . The CVSS 3.1 score is 8.8 (High) with a network at...

CVE-2026-16468 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection...

CVE-2026-16468

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to OS command injection , which could allow a remote authenticated attacker to execute arbitrary commands. The provided documents do not specify the exact component or function responsible for the injection, nor do they provide details on ...

CVE-2026-16346 DataStage on Cloud Pak for Data has several vulnerabilities

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

sh1mazu

Shimazu 4.0 - code name met@rpet@r This an auto-reverse backdoor shell program, for exploiting of vulnerability OS...

CVE-2026-48030

CVE-2026-48030 — OS Command Injection in Pheditor Overview...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...

CVE-2021-45010

CVE-2021-45010 Título del Exploit: Tiny File Manager 2.4.6 Autenticado Ejecución Remota de Código Fecha: 04 Mar 2023 Autor del Exploit: Syd Software Enlace: https://github.com/prasathmani/tinyfilemanager Versión: Tiny File Manager = 2.4.3 Probado en: Parrot OS 20.04 CVE : CVE-2021-45010 Referenci...