38420 matches found
CVE-2026-88282 GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update...
CVE-2026-88282
GeoVision GV-LPC2211 (LPC series) V1.13 contains a stored command injection vulnerability in its FTP username field. An administrator who sets an FTP username containing shell metacharacters can trigger arbitrary root command execution during a subsequent FTP-account update operation. The vulnera...
EUVD-2026-75311
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root...
CVE-2026-88276 GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
EUVD-2026-75310
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
CVE-2026-88275 GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...
EUVD-2026-75309
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...
CVE-2026-88275
GeoVision GV-LPC2211 (also affecting GV-LPC2011) version V1.13 contains a command injection vulnerability in its wireless configuration. An administrator can craft a WPA-PSK password containing shell syntax that, when the wireless configuration is applied, executes arbitrary commands as root . Th...
EUVD-2026-75308
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
CVE-2026-88274 GV-LPC2011/LPC2211 - Wireless SSID Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
CVE-2026-88274 GV-LPC2011/LPC2211 - Wireless SSID Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
CVE-2026-88273 GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
CVE-2026-88273
GeoVision GV-LPC2211 (version V1.13 ) is affected by a command injection vulnerability in its PPPoE username configuration. An administrator-controlled PPPoE username value can escape a sourced shell configuration assignment , allowing the execution of arbitrary commands as root . The attack requ...
CVE-2026-88273 GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
EUVD-2026-75307
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
EUVD-2026-75305
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
CVE-2026-88272
GeoVision GV-LPC2211 V1.13 is affected by a stored command injection vulnerability in the administrator username field. When an administrator creates a username containing shell metacharacters , those characters are later interpreted as arbitrary root-level commands at the time the stored usernam...
CVE-2026-88272 GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling
A vulnerability in Vim's shell script plugins sh.vim, zsh.vim, ps1.vim allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters...
