40944 matches found
CVE-2026-88275 GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...
CVE-2026-88274 GV-LPC2011/LPC2211 - Wireless SSID Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
EUVD-2026-75308
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
CVE-2026-88274 GV-LPC2011/LPC2211 - Wireless SSID Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root...
CVE-2026-88273 GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
CVE-2026-88273
GeoVision GV-LPC2211 (version V1.13 ) is affected by a command injection vulnerability in its PPPoE username configuration. An administrator-controlled PPPoE username value can escape a sourced shell configuration assignment , allowing the execution of arbitrary commands as root . The attack requ...
EUVD-2026-75307
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
CVE-2026-88273 GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root...
EUVD-2026-75305
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
CVE-2026-88272
GeoVision GV-LPC2211 V1.13 is affected by a stored command injection vulnerability in the administrator username field. When an administrator creates a username containing shell metacharacters , those characters are later interpreted as arbitrary root-level commands at the time the stored usernam...
CVE-2026-88272 GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling
A vulnerability in Vim's shell script plugins sh.vim, zsh.vim, ps1.vim allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters...
Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite
CVE-2026-73570 — Zimbra zimbra-snmp Unauthenticated OS Command...
ROOT-APP-NPM-CVE-2026-13311 CVE-2026-13311 in shell-quote - Patched by Root
Root has patched CVE-2026-13311 in the shell-quote package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root
Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-42740 CVE-2021-42740 in shell-quote - Patched by Root
Root has patched CVE-2021-42740 in the shell-quote package for Root:npm. Multiple fixed versions available...
SaltStack <=3002 - Shell Injection
SaltStack Salt through 3002 allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt-API using the SSH client. id: CVE-2020-16846 info: name: SaltStack =3003 to mitigate this vulnerability. reference: -...
PT-2026-89313
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is later deleted...
CVE-2026-73693: Improper Neutralization of Special Elements used in an OS Command
FileRun before 2026.3.0 contains an OS command injection vulnerability in the PhotoProofSheet handler that allows authenticated users with upload permission to execute arbitrary commands by uploading files with shell metacharacters in their names. Attackers can upload a file containing command...