18714 matches found
SolarWinds IT infrastructure management Security Bypass
The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands remotely...
Container management system CRLF Command Execution
The vulnerability of the container management system and the virtual machine manager Incus is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
MAL-2026-548 Malicious code in tabletas (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27d102f1cf4d0e6b08e5e77aa57a2a436a49f782fe6571b2a8e8d114e10d968d Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in...
CVE-2026-23592
CVE-2026-23592 affects HPE Aruba Networking Fabric Composer. Insecure file operations in the backup functionality could allow authenticated attackers to achieve remote code execution and run arbitrary commands on the underlying OS. No remediation details are provided in the supplied documents.
FortiSandbox GUI Arbitrary Command Execution
The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute...
FortiExtender Signal Booster Command Injection
The vulnerability of the FortiExtender signal booster software lies in the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Wavlink WL-NU516U1 Wireless Script Arbitrary Command Execution
The vulnerability of the sub403010 function in the /cgi-bin/wireless.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the lack of measures taken to clean data at the control level when processing the macAddr parameter. Exploiting this vulnerability allows an attack...
Wavlink Router Set Sys Adm Command Execution
The vulnerability of the setsysadm function in the microprogramming-based routing software of Wavlink WL-WN530H4 lies in the lack of measures taken to sanitize data at the control level when processing the newpass parameter. Exploiting this vulnerability allows a remote attacker to execute...
PT-2026-6970
Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A security issue exists in the DDNS Service component of D-Link DIR-823X version 250416. The issue relates to the processing of the /goform/set ddns file. Manipulation of the ddnsType, ddnsDomainName,...
Wavlink Wireless Printer Subroutine Command Execution
The vulnerability of the sub4012A0 function in the /cgi-bin/login.cgi script of the Wavlink WL-NU516U1 wireless USB printer software is related to the lack of data cleaning measures at the control level when processing the ipaddr parameter. Exploiting this vulnerability allows an attacker to...
PT-2026-4760
CVE-2026-24642 - Apache HTTP Server Unauthenticated Remote Command Execution CVE ID : CVE-2026-24642 Published : Jan. 24, 2026, 4:15 a.m. | 1 hour, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...
CVE-2025-36588
Dell Unisphere for PowerMax, versions 10.2.0.x, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
Oracle HTTP Server and Weblogic Proxy Plug-in vulnerability
Added: 01/23/2026 Background Oracle HTTP Server is the web server component for Oracle Fusion Middleware. Problem A vulnerability in Oracle HTTP Server and Weblogic Proxy Plug-in could allow a remote attacker to execute arbitrary commands by requesting a specially crafted path which allows...
GitHub Kanban MCP Server: Operating System Command Injection Vulnerability
GitHub Kanban MCP Server is an application developed by Maki, a personal developer. The GitHub Kanban MCP Server has a vulnerability related to operating system command injection. This vulnerability arises from executing system calls without validating user input when processing the createissue...
Oracle HTTP Server and Weblogic Proxy Plug-in vulnerability
Added: 01/23/2026 Background Oracle HTTP Server is the web server component for Oracle Fusion Middleware. Problem A vulnerability in Oracle HTTP Server and Weblogic Proxy Plug-in could allow a remote attacker to execute arbitrary commands by requesting a specially crafted path which allows...
PT-2026-4517
Name of the Vulnerable Software and Affected Versions PhreeBooks version 5.2.3 Description PhreeBooks version 5.2.3 has a flaw in the Image Manager related to file uploads. An authenticated attacker can upload a malicious PHP web shell due to unrestricted file type uploads, potentially leading to...
Exploit for CVE-2024-9932
CVE-2024-9932 / 0-Click RCE Exploit - Author: Joshua Provoste...
Exploit for Code Injection in Lubus Wp_Query_Console
CVE-2024-50498 / 0-Click RCE Exploit - Author: Joshua Provost...