CVE-2026-116053

A flaw was found in mycli. A local attacker can execute arbitrary operating system commands by supplying crafted input that bypasses safety checks in the special command whitelist. This allows malicious commands to run with the permissions of the user running the application. Mitigation Avoid...

PT-2026-123051

A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function source special command is safe of the file mycli/packages/special/source.py of the component Whitelist. Executing a manipulation can lead to os command injection. It is possible to launch the...

n8n Command Injection

The vulnerability of the n8n automation platform exists because measures are not taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or read arbitrary files remotely...

Pi-hole Command Injection Code Execution

The vulnerability of the Pi-hole ad-blocking application is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Nimes Backup and Recovery Command Injection

The vulnerability of the Nimes Backup and Recovery software for automated backup and data recovery operations is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute...

Linux IGEL OS Command Injection

The vulnerability of the Linux-based IGEL OS for end devices is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Cisco IOS XE Data Compromise

The vulnerability of the Cisco IOS XE operating system’s web management interface relates to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity...

HDL-T Hard Disk Code Execution

The vulnerability of HDL-T hard disk microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Dell Storage Manager command injection vulnerability

Dell Storage Manager is a centralized storage management platform from Dell USA. A command injection vulnerability exists in Dell Storage Manager that stems from improper neutralization of special elements in commands, no details of the vulnerability are available at this time...

Dell Unity OE Privilege Escalation Command Injection

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

Dell Unity OE Privilege Escalation Command Injection

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

CVE-2018-9364: Observable Discrepancy

In the LG LAF component, there is a special command that allowed modification of certain partitions. This could lead to bypass of secure boot. User interaction is not needed for exploitation...

Junos OS Evolved Privilege Escalation

The vulnerability of the command-line interface CLI of Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series exists due to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to elevate...

OnCell G3470A-LTE Web Server Code Execution

The vulnerability of the web server of the microprogramming software in the industrial cellular LTE modem OnCell G3470A-LTE is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to...

Dell PowerProtect Data Manager Arbitrary Action

The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

TP-Link Omada ER605 VPN Router Code Execution

The vulnerability of TP-Link Omada ER605 VPN router’s microprogramming software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root user’s...

Ivanti Standalone Sentry Code Execution

The vulnerability of the built-in mobile security firewall, Ivanti Standalone Sentry, exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

QNAP Command Injection

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

QNAP QVR Command Injection

The vulnerability of the QNAP QVR video surveillance system exists due to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ArubaOS Command Injection

The vulnerability of the ArubaOS operating systems exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...