CVE-2026-59680

An OS command injection vulnerability in yast2-users (through 5.0.8 ) allows root-level command execution via a malicious LDAP directory. The flaw is in get_password_term() in src/include/users/dialogs.rb, which reads the shadowLastChange and shadowExpire attributes via GetString() with no numeri...

EUVD-2026-68996

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, getpasswordterm in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString, which performs no numeric validation, and passed the resulting...

CVE-2026-65643

cPanel & WHM versions prior to 11.138.0.2 (and older branches 11.110, 11.134, 11.136) contain an eval injection in the domain parking and addon domain functionality. An authenticated user with permission to add parked or addon domains can create arbitrary files on the server, escalating to code e...

CVE-2023-26866

CVE-2023-26866 الوصف تعتبر وحدة WR-1200 الداخلية من GreenPacket OH736 ووحدة OT-235 مع إصدارات البرامج الثابتة M-IDU-1.6.0.3V1.1 و MH-46360-2.0.3-R5-GP على التوالي معرضة لحقن الأوامر عن بُعد. يتم تنفيذ الأوامر باستخدام تنفيذ ما قبل تسجيل الدخول ويتم تنفيذها بصلاحيات الجذر مما يسمح بالسيطرة الكاملة...

SUSE CVE-2026-59680

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, getpasswordterm in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString, which performs no numeric validation, and passed the resulting...

PT-2026-84136

Name of the Vulnerable Software and Affected Versions yast2-samba-client versions prior to 5.0.5 Description Improper neutralization of special elements used in an OS command allows an attacker to execute arbitrary commands as root on a machine being joined to a domain. This occurs when the...

PT-2026-84137

Name of the Vulnerable Software and Affected Versions yast2-auth-client affected versions not specified Description An OS command injection flaw exists in the Auth::AuthConf function within src/lib/auth/authconf.rb. The issue occurs when the software assembles Samba net ads join, net ads lookup -...

PT-2026-84129

Name of the Vulnerable Software and Affected Versions yast2-users versions prior to 5.0.9 Description An OS command injection issue exists when displaying the Password Settings tab of a user. The get password term function in src/include/users/dialogs.rb retrieves the shadowLastChange and...

CVE-2026-16658

A flaw was found in the community.proxmox Ansible collection's proxmoxpctremote connection plugin. The buildpctcommand method constructs a pct exec command string using unquoted string concatenation and passes it to the Proxmox host's shell via Paramiko. Shell metacharacters in the command such a...

CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV Remote Command Injection CVE-2019-3929 Metasploit Module Per Tenable's description: "A remote, unauthenticated attacker can execute operating system commands as root via crafted requests to the HTTP endpoint filetransfer.cgi. This vulnerability...

CVE-2025-67888

CVE-2025-67888 Control Web Panel = 0.9.8.1208 admin/index.php OS Command Injection Vulnerability Affected Versions: Version 0.9.8.1208 and prior versions. Vulnerability Description: User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly...

CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-Link Archer C20 v6 web management interface. BPA WAN configuration values are passed to system without adequate neutralization, allowing an authenticated administrator on the adjacent network to execute commands as root. Discovered and...

CVE-2026-11834

CVE-2026-11834 PoC TP-Link DHCP Option 66 Unauthenticated RCE CVE-2026-11834 Overview A command injection vulnerability CWE-78 in the DHCP Option 66 "TFTP Server Name" handling of TP-Link router firmware allows an unauthenticated attacker on the same network segment to execute arbitrary commands ...

CVE-2026-10520

🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry Pre-Authentication Remote Code Execution + Authentication Bypass Author: Ashraf Zaryouh "0xBlackash" 📌 Overview Two critical vulnerabilities affecting Ivanti Sentry formerly MobileIron Sentry: CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command...

Amazon Linux 2 : dracut, --advisory ALAS2-2026-3875 (ALAS-2026-3875)

The version of dracut installed on the remote host is prior to 033-535. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3875 advisory. A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hoo...

Important: dracut

Issue Overview: A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent...

Important: dracut

Issue Overview: A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent...

PcanExploit

CVE-2024-44610: ثغرة استغلال الجذر المصادق عليها في بوابة PEAK PCAN-Ethernet Gateway FD DR ما هو؟ يحتوي هذا المستودع على استغلال إثبات المفهوم PoC ينفذ كودًا بصلاحيات الجذر على بوابات Peak Ethernet. يتطلب معرفة بيانات اعتماد واجهة الويب. كيفية الإصلاح؟ قدم البائع بسرعة برنامج ثابت محدث: إصدار...

OESA-2026-3501 dracut security update

dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well ...

CVE-2026-42271-PoC

CVE-2026-42271 — Iniezione di comandi autenticata in LiteLLM tramite endpoint di test MCP stdio LiteLLM POST /mcp-rest/test/connection e POST /mcp-rest/test/tools/list — Iniezione di comandi autenticata tramite trasporto MCP stdio. Qualsiasi chiave API valida può eseguire comandi OS arbitrari com...