Command injection.

Budibase: Command Injection in Bash Automation Step

• Command injection

<3.33.4 · fixed in 3.33.4

RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component

• infiniflow ragflow
• Command injection
• Code injection

Improper neutralization of special elements in authentication components in Amazon Athena ODBC driver

• Amazon Athena ODBC driver
• Command injection

OS command injection in Amazon Athena ODBC driver on Linux

• Amazon Athena ODBC driver
• Command injection

Roundcube Webmail: Unsanitized IMAP SEARCH command arguments

• Command injection

>=1.7-beta, <1.7-rc5 · fixed in 1.7-rc5

Electron: AppleScript injection in app.moveToApplicationsFolder on macOS

• Command injection

<38.8.6 || >=39.0.0-alpha.1, <39.8.1 || >=40.0.0-alpha.1, <40.8.0 || >=41.0.0-alpha.1, <41.0.0-beta.8 · fixed in 38.8.6, 39.8.1, 40.8.0, 41.0.0-beta.8

Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

• Command injection
• CWE-912

<38.8.6 || >=39.0.0-alpha.1, <39.8.0 || >=40.0.0-alpha.1, <40.7.0 || >=41.0.0-alpha.1, <41.0.0-beta.8 · fixed in 38.8.6, 39.8.0, 40.7.0, 41.0.0-beta.8

Trendnet TEW-657BRM setup.cgi vpn_drop os command injection

• Trendnet TEW-657BRM
• Command injection

Trendnet TEW-657BRM setup.cgi vpn_connect os command injection

• Trendnet TEW-657BRM
• Command injection

Trendnet TEW-657BRM setup.cgi ping_test os command injection

• Trendnet TEW-657BRM
• Command injection

Trendnet TEW-657BRM setup.cgi edit os command injection

• Trendnet TEW-657BRM
• Command injection

Trendnet TEW-657BRM setup.cgi add_wps_client os command injection

• Trendnet TEW-657BRM
• Command injection

Endian Firewall /cgi-bin/logs_smtp.cgi DATE Perl Command Injection

• Endian Firewall
• Command injection

Endian Firewall /cgi-bin/logs_openvpn.cgi DATE Perl Command Injection

• Endian Firewall
• Command injection

Endian Firewall /cgi-bin/logs_log.cgi DATE Perl Command Injection

• Endian Firewall
• Command injection

Endian Firewall /cgi-bin/logs_ids.cgi DATE Perl Command Injection

• Endian Firewall
• Command injection

Endian Firewall /cgi-bin/logs_firewall.cgi DATE Perl Command Injection

• Endian Firewall
• Command injection

Endian Firewall /cgi-bin/logs_clamav.cgi DATE Perl Command Injection

• Endian Firewall
• Command injection

Endian Firewall /cgi-bin/logs_proxy.cgi DATE Perl Command Injection

• Endian Firewall
• Command injection

Tenda G103 Setting gpon.lua action_set_net_settings command injection

• Tenda G103
• Other injection
• Command injection

Tenda G103 Setting system.lua action_set_system_settings command injection

• Tenda G103
• Other injection
• Command injection

DefaultFuction Content-Management-System tools.php command injection

• DefaultFuction Content-Management-System
• Other injection
• Command injection

Unintended command execution during report generation in Progress Flowmon

• Progress Software Flowmon
• Command injection

RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)

• Progress ShareFile Storage Zones Controller
• Command injection
• Code injection

fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function

• Other injection
• Command injection

<=3.5.0 · no fixed version yet

MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray

• MB connect line mbCONNECT24
• MB connect line mymbCONNECT24
• Command injection

Code Execution in AssistFeedbackService on TECNO Pova7 Pro 5G

• TECNO Mobile TECNO Pova7 Pro 5G
• Command injection

PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

• Command injection

<4.5.97 · fixed in 4.5.97

KubeAI: OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods

• Command injection

<0.23.2 · fixed in 0.23.2

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

• Command injection

<1.5.90 · fixed in 1.5.90

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

• IBM Verify Identity Access Container
• IBM Security Verify Access Container
• Command injection

Cisco Integrated Management Controller Command Injection Vulnerability

• Cisco Enterprise NFV Infrastructure Software
• Cisco Unified Computing System (Standalone)
• Command injection

Cisco Integrated Management Controller Command Injection Vulnerability

• Cisco Unified Computing System (Standalone)
• Cisco Unified Computing System E-Series Software (UCSE)
• Command injection

Cisco Integrated Management Controller Command Injection Vulnerability

• Cisco Enterprise NFV Infrastructure Software
• Cisco Unified Computing System (Standalone)
• Command injection

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.

• Command injection

baserCMS has OS command injection vulnerability in installer

• Command injection

<5.2.3 · fixed in 5.2.3

baserCMS Update Functionality Vulnerable to OS Command Injection

• Command injection

<5.2.3 · fixed in 5.2.3

baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)

• Command injection

<5.2.3 · fixed in 5.2.3

FastMCP has a Command Injection vulnerability - Gemini CLI

• Command injection

<3.2.0 · fixed in 3.2.0

OS command injection in NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson Thor

• NVIDIA Jetson Xavier Series, Jetson Orin Series and Jetson Thor
• Command injection

wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`

• njzjz wenxian
• Command injection

Cato's Socket WebUI is vulnerable to OS Command Injection

• Cato Networks Socket
• Command injection
• CWE-20

TRENDnet TEW-713RE setSysAdm command injection

• TRENDnet TEW-713RE
• Other injection
• Command injection

TRENDnet TEW-713RE addRouting sub_421494 command injection

• TRENDnet TEW-713RE
• Other injection
• Command injection

Totolink A3300R cstecgi.cgi setIptvCfg command injection

• Totolink A3300R
• Other injection
• Command injection

Totolink A3300R cstecgi.cgi setWiFiBasicCfg command injection

• Totolink A3300R
• Other injection
• Command injection

Totolink A3300R cstecgi.cgi setSyslogCfg command injection

• Totolink A3300R
• Other injection
• Command injection

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.

• Command injection

DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.

• Command injection

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.

• Command injection

In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands.

• Command injection

InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective.

• Command injection

Tenda CH22 WriteFacMac FormWriteFacMac command injection

• Tenda CH22
• Other injection
• Command injection

OS command injection in Vim

• Vim
• Command injection
• Code injection

Glances Vulnerable to Command Injection via Dynamic Configuration Values

• Command injection

<4.5.3 · fixed in 4.5.3

raine consult-llm-mcp server.ts child_process.execSync os command injection

• raine consult-llm-mcp
• Command injection

nginx-UI has Unencrypted Storage of DNS API Tokens and ACME Private Keys

• Command injection
• Broken access control

<=1.99 · no fixed version yet

MLflow Command Injection vulnerability

• Command injection

<3.8.1 · fixed in 3.8.1

Totolink A3300R Parameter cstecgi.cgi setVpnPassCfg command injection

• Totolink A3300R
• Other injection
• Command injection

Totolink A3300R cstecgi.cgi setStaticRoute command injection

• Totolink A3300R
• Other injection
• Command injection