67541 matches found
EUVD-2026-75586
A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker...
CVE-2026-81468
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
EUVD-2026-75570
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-81468
Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A high-privileged attacker with remote access could potentially exploit this flaw to achieve command execution on the device....
EUVD-2026-75568
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-81467
Dell ThinOS 10 (versions prior to 2605_10.2616 ) is affected by an OS Command Injection vulnerability. An unauthenticated attacker with remote network access can exploit this flaw to achieve arbitrary command execution on the device. Dell assigned a CVSS v3.1 score of 9.8 (Critical) , reflecting ...
CVE-2026-81467
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-4129 Improper Access Controls in NI SystemLink
There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior...
CVE-2026-23500
CVE-2026-23500: Dolibarr の MAINODTASPDF 設定を介した OS コマンドインジェクション RCE 概要...
CVE-2026-64837
ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...
CVE-2026-64837 ICEcoder through 8.1 OS Command Injection via lib/properties.php
ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...
nexus-os
Nexus OS 통제된 에이전트 AI 운영 체제 66 크레이트 | 675 명령 | 86 페이지 | 5,229 테스트 | 10/10 OWASP | 제로 스텁 로컬 우선. 에어 갭 가능. 포스트퀀텀 대비. Rust로 제작. 아키텍처 | 빠른 시작 | 기능 | 감사 상태 | 문서 Nexus OS는 에이전트가 암호학적 아이덴티티, 통제된 자율성, 그리고 진화 능력을 가진 일급 시민으로 취급되는 AI 에이전트 운영 체제입니다. 전적으로 사용자 하드웨어에서 실행되며, 클라우드 의존성, 데이터 유출, 에어 갭이 가능합니다. 모든 행동은 해...
Scanning
취약점 분석 - LAB W7 설명 | ---|--- 과목 코드| IKB21004 및 IKB21403 과제| 파일 분석 - 스캔 결과 난이도| 중급 범주| 취약점 평가, 네트워크 분석 사용 기술| 패킷 분석, OS 핑거프린팅, 취약점 해석, Nessus 분석 사용 도구| Wireshark, Nmap, Nessus 개요 이 실습은 네트워크 스캔 결과 분석, Nmap 출력을 해석하여 취약한 서비스 식별, TTL 값을 이용한 OS 핑거프린팅 수행, Ghostcat 중요 취약점을 포함한 Nessus 스캔 결과 분석에 중점을 둡니다. 질...
CVE-Requests-1896609
CVE リクエスト 1896609 - feiskyer/mcp-kubernetes-server エグゼクティブサマリー このレポートは、feiskyer/mcp-kubernetes-server パッケージで発見された 2 つの重大なセキュリティ脆弱性について詳述します。デプロイ時、サーバーは Kubernetes クラスターへの限定的かつ安全なアクセスを提供することを目的とした MCP ツール kubectl を公開します。しかし、入力検証が不十分なため、2 つの異なる攻撃経路が可能になります： OS コマンドインジェクション: 攻撃者はシェルのメタ文字（例:...
CVE-2026-0302
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
Ashwesker-CVE-2025-64155
🔒 CVE-2025-64155: FortiSIEM의 중요한 취약점 📌 개요 CVE-2025-64155 는 널리 사용되는 보안 정보 및 이벤트 관리 플랫폼인 Fortinet FortiSIEM 에서 발견된 중대한 보안 취약점 입니다. 2026년 1월 13일 에 공개적으로 공개되었으며, 인증되지 않은 원격 공격자가 임의의 시스템 명령을 실행할 수 있도록 합니다. ⚠️ 취약점 세부 정보 유형: OS 명령 주입 CWE-78 영향: 루트 권한으로 원격 코드 실행 RCE 공격 벡터: 네트워크 TCP 포트 7900 필요 권한: 없음 사용자...
CVE-2026-0310
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...
CVE-2026-0308
A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...
CVE-2026-0309
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...