71471 matches found
CVE-2024-33676
CVE-2024-33676 Weak authentication and authorization on Enel X JuiceBox Level 2 EV charger enables access to operating system functions and parameters. Description Users on the local EV charger WLAN network can extract PII, change settings, and manipulate the operating system file system. This is...
CVE-2026-94490
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...
CVE-2026-94490 OctoPrint Command API system.py executeSystemCommand os command injection
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...
EUVD-2026-84249
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...
CVE-2026-94490
CVE-2026-94490 affects OctoPrint 1.0.0 , specifically the executeSystemCommand function in src/octoprint/server/api/system.py (the Command API component). The vulnerability is an OS command injection triggered by manipulating the command argument. The attack can be initiated remotely but requires...
CVE-2026-65130: Improper Neutralization of Special Elements used in an OS Command
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
CVE-2026-95660: Improper Neutralization of Special Elements used in an OS Command
A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts of the component MCP Configuration Loader. The manipulation results in os command injection. The attack may be launched...
CVE-2026-94490: Improper Neutralization of Special Elements used in an OS Command
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of the file src/octoprint/server/api/system.py of the component Command API. Performing a manipulation of the argument command results in os command injection. It is possible to...
Linux Distros Unpatched Vulnerability : CVE-2026-53534
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the G...
CVE-2026-43641: Improper Neutralization of Special Elements used in an OS Command
Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attackers to execute arbitrary commands as root by bypassing authentication through specific parameter combinations. Attackers can...
CVE-2025-69212_PoC
CVE-2025-69212: OpenSTAManager Proof of Concept PoC This repository contains a Proof of Concept PoC demonstrating the vulnerability identified as CVE-2025-69212 within OpenSTAManager, an OS Command Injection vulnerability caused by the P7M signed XML file decoding functionality. The versions...
GhostLock
GhostLock 5.10 Este es un exploit de root a nivel de kernel para el Amazon Fire Max 11 sunstone y el Fire TV Stick 4K Max 2.ª generación / 2023 karat, adaptado de CVE-2026-43499 en CyberMeowfia. Dispositivos compatibles Se admiten dos dispositivos, ambos con Fire OS 8. Cada uno tiene su propio...
CVE-2011-3368
CVE-2011-3368 PoC Exploit. cve-2011-3368 Install: git clone https://github.com/colorblindpentester/CVE-2011-3368 cd CVE-2011-3368 python2 CVE-2011-3368.py Tested on: OS X macos Parrot OS Kali linux...
CVE-2026-61852
Chartbrew (open-source charting web app) prior to 5.2.2 is vulnerable to SQL injection in its AI runQuery() tool (server/modules/ai/orchestrator/tools/runQuery.js). The row_limit parameter is interpolated into a SQL LIMIT clause without integer validation; because the read-only keyword check exec...
CVE-2026-61852 Chartbrew: SQL Injection via row_limit Parameter in AI runQuery Tool
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQuery implementation in server/modules/ai/orchestrator/tools/runQuery.js interpolates the AI tool's rowlimit parameter into a SQL LIMIT...
CVE-2017-12149
CVE-2017-12149 Many thanks to Master yunxu1 for the source code Description: root@kitploit: Removed the graphical interface Fixed command execution failure caused by system identification errors Changed to an interactive shell Usage Enter the URL and press Enter; it will automatically execute...
CVE-2025-69212-PoC
CVE-2025-69212 OpenSTAManager = 2.9.8 — OS Command Injection in P7M File Processing Overview...
CVE-2026-69212
CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Proof-of-concept exploit for CVE-2025-69212 , an OS Command Injection vulnerability in OpenSTAManager = 2.9.8 that allows an authenticated attacker to achieve Remote Code Execution via a maliciously crafted ZIP file upload. Advisory CVE:...
cve-2025-11142-axis-mediaclip-rce
CVE-2025-11142 — Inyección de comandos del sistema operativo en mediaclip.cgi de AXIS Informe de investigación n-day y PoC — análisis técnico posterior al parche de una vulnerabilidad de inyección de comandos del sistema operativo con CVSS 7.1 en la API VAPIX Media Clip de AXIS, redescubierta de...