PT-2026-94017

Name of the Vulnerable Software and Affected Versions Cisco ISE versions 3.1 patches 8 through 11 Cisco ISE versions 3.2 patches 7 through 10 Cisco ISE versions 3.3 patches 1 through 11 Cisco ISE versions 3.4 base 3.4.0 through patch 6 Cisco ISE versions 3.5 base 3.5.0 through patch 3 Cisco ISE-P...

CVE-2026-89010: Improper Neutralization of Special Elements used in an OS Command

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the syncserver daemon on TCP port 13136. The daemon...

CVE-2026-67609: Execution with Unnecessary Privileges

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apache account to execute arbitrary commands as root by exploiting an insecure sudoers configuration in...

CVE-2025-59156: Improper Neutralization of Special Elements used in an OS Command

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.420.7, a Remote Code Execution RCEvulnerability exists in Coolify's application deployment workflow. This flaw allows a low-privileged member to inject arbitrary Docker...

PT-2025-47894

CERT/CC Warns of Unpatched Root-Level Command Injection Flaws in Tenda 4G03 Pro and N300 Routers CVE-2025-13207, CVE-2024-24481 https://t.co/ZUXQixklyd...

MV POWER CCTV DVR 安全漏洞

MV POWER CCTV DVR is a series of CCTV cameras from MV POWER. A security vulnerability exists in MV POWER CCTV DVR TV-7104HE version 1.8.4 115215B9 and TV7108HE version. An attacker can exploit this vulnerability to execute arbitrary operating system commands as the root user...

Command execution vulnerability at root level in Xiaomi Router 3A user management page

Xiaomi Router 3A is a router. A command execution vulnerability exists at the root level of the Xiaomi Router 3A user management page. An attacker can exploit the vulnerability to remotely execute arbitrary code...

QuickTime Streaming Server - 'parse_xml.cgi' Remote Execution (Metasploit)

$Id: qtssparsexmlexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...