66757 matches found
CVE-2026-73147
A flaw was found in svxlink's reflector client. The talkerstart and talkerstop event handlers directly concatenate a server-supplied talker callsign into TclEval commands without any sanitization or escaping. A malicious or compromised reflector server can supply a crafted callsign containing TCL...
CVE-2026-12052
The CVE-2026-12052 issue affects Zephyr’s USB device CDC NCM class (usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.c). The handler builds fixed-size responses for GET_NTB_PARAMETERS (28-byte) and GET_NTB_INPUT_SIZE (8-byte) and copies the entire structure into the control DATA IN b...
CVE-2026-12052 Out-of-bounds write in USB CDC NCM control handler when host wLength is smaller than the response
The USB device-side CDC NCM class control-to-host handler usbdcdcncmcth in subsys/usb/devicenext/class/usbdcdcncm.c builds a fixed-size response for the GETNTBPARAMETERS 28-byte struct ntbparameters and GETNTBINPUTSIZE 8-byte struct ntbinputsize class requests and copies the whole structure into...
CVE-2026-8158
The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected...
CVE-2026-58236
The CVE-2026-58236 entry concerns SAP NetWeaver Application Server ABAP and ABAP Platform, where an attacker with high privileges can bypass a missing security control on an internal code path and trigger OS command execution. The impact description indicates OS-level command execution that could...
EUVD-2026-55868
SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution. Successful exploitation could allow the attacker to execute OS-level commands that write to th...
PT-2026-70175
n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search search files tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the...
PT-2026-70131
Name of the Vulnerable Software and Affected Versions ZoneMinder version 1.39.17 Description An authenticated user can execute OS commands due to a broken permission check within the Filter class. The canEdit and canDelete functions call nonexistent methods on the ZMUser class, which triggers the...
PT-2026-70147
Name of the Vulnerable Software and Affected Versions wg-easy version 15.3.0 Description An OS command injection issue exists where users with the clients.create permission can execute arbitrary commands as root. This occurs because the client name field is written to the WireGuard configuration...
PT-2026-70742
Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
PT-2026-70058
Name of the Vulnerable Software and Affected Versions Bouffalo Lab on-chip BLE controllers BL60x/BL70x/BL61x affected versions not specified Description The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers contains an issue where the bt bflb send function in drivers/bluetooth/hci/hci...
PT-2026-70348
Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. This flaw allows a low-privileged attacker to bypass security features and...
PT-2026-70021
Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence MII affected versions not specified Description An attacker with high privileges can submit specially crafted input to certain functionality that is processed without sufficient validation. This...
PT-2026-70768
Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in an OS command, known as OS command injection, allows an unauthorized attacker to...
PT-2026-70344
Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. This allows an attacker to execute arbitrary code in the context of the curre...
CorgetGpsDget 2_3.2 Command Injection
CorgetGpsDget version 23.2 suffers from a remote command injection vulnerability. Exploit Title: CorgetGpsDget 23.2 - OS Command Injection Date: 2026-07-05 Exploit Author: Bytetobreach Fofa server: "PTTServer" Vendor Homepage: http://corget.com Version: GpsDget 23.2, build 2020-09-01 dget.version...
Critical Photon OS Security Update - PHSA-2026-5.0-92-0952
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
PT-2026-70189
Name of the Vulnerable Software and Affected Versions SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 versions prior to V4.3.4.1 Description Devices running Industrial OS with Node-RED installed do not enforce authentication on the Node-RED HTTP interface. This allows unauthenticated access to...
PT-2026-70028
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description An attacker with high privileges can bypass missing security controls on an internal code path, leading to operating system command execution...