Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/16 12:00 a.m.•2 views

CVE-2026-12161: Improper Neutralization of Special Elements used in an OS Command

Improper input validation in the SSH Elevate Shell feature in Devolutions Remote Desktop Manager 2026.2.7 allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a remote SSH host using stored elevation credentials via a crafted alterna...

8.8CVSS6.2AI score0.00438EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/08 12:00 a.m.•0 views

CVE-2026-42453: Improper Neutralization of Special Elements used in a Command

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, the extractArchive and compressFiles endpoints in file-manager.ts use double-quoted strings for shell command construction, unlike all other file manager operation...

8.7CVSS5.8AI score0.01554EPSS
SaveExploits0References2
Rows per page
Query Builder