PT-2026-93850

Name of the Vulnerable Software and Affected Versions SSH.NET versions prior to 2026.0.0 Description In the ScpClient component, caller-supplied remote paths are placed into the command used to run scp on the server. Because the default RemotePathTransformation.DoubleQuote transformation cannot...

CVE-2026-58146: Improper Neutralization of Special Elements used in an OS Command

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

PT-2026-93358

An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot...

SUSE CVE-2026-91786

A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing oversized icon...

CVE-2026-10144 Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...

CVE-2026-10144

Rsbuild before 2.0.9 contains a command injection vulnerability in the openBrowser() function (packages/core/src/server/open.ts). The function passes a URL through encodeURI() before interpolating it into a shell command executed via child_process.exec(). Because encodeURI() does not encode dolla...

CVE-2026-10144 Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by supplying a crafted URL containing shell metacharacters to the server.open configuration on macOS. The openBrowser function in packages/core/src/server/open.ts passes the URL...

DG-Home1

Authenticated OS Command Injection in ElphaPex DG Home1 Web Fi...

CVE-2026-58502

githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...

EUVD-2026-78911

githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...

CVE-2026-58502

githubtoplanguages , a tool that renders a user's top GitHub languages as an SVG, is affected by a command injection in its .github/workflows/discord-issue.yml GitHub Actions workflow. The workflow interpolates github.event.issue.title directly into a Bash assignment before shell parsing, so any ...

CVE-2026-85013

A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...

UBUNTU-CVE-2026-85013

A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...

Malicious code in strapi-plugin-uicc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393f18bab3c8fe1d9bea2d425d24d385657785e23cc053ac5e2c1c322f75129 postinstall.js is registered as both the npm postinstall hook and the package main. On install it polls os.hostname every 3 seconds and, when the...

MAL-2026-16191 Malicious code in strapi-plugin-uicc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d393f18bab3c8fe1d9bea2d425d24d385657785e23cc053ac5e2c1c322f75129 postinstall.js is registered as both the npm postinstall hook and the package main. On install it polls os.hostname every 3 seconds and, when the...

Malicious code in strapi-plugin-revs-meeb322k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76370f1e289c374fef3b0cea33d2c21fcaa09e7937ecf6d8ba6386916225878 [email protected] ships a postinstall.js registered as scripts.postinstall in package.json. On npm install, the script runs...

MAL-2026-16184 Malicious code in strapi-plugin-revs-meeb322k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76370f1e289c374fef3b0cea33d2c21fcaa09e7937ecf6d8ba6386916225878 [email protected] ships a postinstall.js registered as scripts.postinstall in package.json. On npm install, the script runs...

MAL-2026-16194 Malicious code in strapi-plugin-yesccresh-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4fa4d6fa3f37bcc5179aecbcb365bc73d94ac1cb799ac4f93fa4702292b493 package.json declares postinstall: node postinstall.js, which unconditionally spawns bash with stdio redirected to /dev/tcp/14.225.210.85/443, giving...

Malicious code in strapi-plugin-revsh-meeb322k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d4e28da86ccc1cb11bae22a247171657c958b6bf24b8bf4541bb08970c969b package.json declares scripts.postinstall = "node postinstall.js", causing postinstall.js to run automatically on npm install. That file executes bas...

MAL-2026-16187 Malicious code in strapi-plugin-revsh-meeb322k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d4e28da86ccc1cb11bae22a247171657c958b6bf24b8bf4541bb08970c969b package.json declares scripts.postinstall = "node postinstall.js", causing postinstall.js to run automatically on npm install. That file executes bas...