Command injection.

choieastsea simple-openstack-mcp server.py exec_openstack os command injection

• choieastsea simple-openstack-mcp
• Command injection

AgentDeskAI browser-tools-mcp browser-connector.ts os command injection

• AgentDeskAI browser-tools-mcp
• Command injection

Intina47 context-sync Git Integration git-integration.ts os command injection

• Intina47 context-sync
• Command injection

Toowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection

• Toowiredd chatgpt-mcp-server
• Command injection

666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection

• 666ghj MiroFish
• Other injection
• Command injection

tufantunc ssh-mcp index.ts shell.write command injection

• tufantunc ssh-mcp
• Other injection
• Command injection

Totolink A8000RU CGI cstecgi.cgi setVpnPassCfg os command injection

• Totolink A8000RU
• Command injection

GitPython has Command Injection via Git options bypass

• Command injection

>=3.1.30, <3.1.47 · fixed in 3.1.47

GitPython: Unsafe option check validates multi_options before shlex.split transformation

• Command injection

<3.1.47 · fixed in 3.1.47

LiteLLM: Authenticated command execution via MCP stdio test endpoints

• Command injection

>=1.74.2, <1.83.7 · fixed in 1.83.7

PicoClaw has an Injection issue in its Web Launcher Management Plane component

• Other injection
• Command injection

<=0.2.4 · no fixed version yet

Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection

• Linksys MR9600
• Command injection

Tenda F453 Telnet Service telnet TendaTelnet command injection

• Tenda F453
• Other injection
• Command injection

Divyanshu-hash GitPilot-MCP main.py repo_path command injection

• Divyanshu-hash GitPilot-MCP
• Other injection
• Command injection

simple-git is vulnerable to Remote Code Execution

• Command injection
• Code injection

<3.36.0 · fixed in 3.36.0

electerm has Command Injection via runLinux funtion

• Command injection

<3.3.8 · fixed in 3.3.8

Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses

• Command injection
• Information disclosure

<0.39.1 || >=0.40.0-preview.2, <0.40.0-preview.3 · fixed in 0.39.1, 0.40.0-preview.3

SiYuan Desktop Notification XSS Leads to Electron RCE

• siyuan
• Command injection
• Cross-site scripting (XSS)

Vim: Command injection via backtick expansion in tag filenames

• vim
• Command injection

Claude Code: Trust Dialog Bypass via Git Worktree Spoofing Allows Arbitrary Code Execution

• Command injection
• CWE-20

>=2.1.63, <2.1.84 · fixed in 2.1.84

Roxy-WI Vulnerable to Authenticated Remote Code Execution via OS Command Injection in find-in-config Endpoint

• roxy-wi
• Command injection

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

• Command injection
• Code injection

<2.0.3 · fixed in 2.0.3

radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass

• radareorg radare2-mcp
• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi.

• Command injection

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi.

• Command injection

TSSC/IMC is vulnerable to OS Command Injection

• IBM Total Storage Service Console (TSSC) / TS4500 IMC
• Command injection

Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

• Command injection

<1.69.3 · fixed in 1.69.3

radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names

• radareorg radare2
• Command injection

Inspektor Gadget: Command Injection via malicious buildOptions manipulation

• Command injection

<0.51.1 · fixed in 0.51.1

PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes

• Command injection
• Other injection

>=12.5.21, <12.5.22 || >=13.1.5, <13.1.6 · fixed in 12.5.22, 13.1.6

RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution

• Command injection
• Code injection

>=1.48.0, <1.73.5 · fixed in 1.73.5

Comfast CF-N1-S Endpoint mbox-config command injection

• Comfast CF-N1-S
• Other injection
• Command injection

Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

• Command injection

>=1.0.0, <1.0.2 || >=1.2.0, <1.3.4 || >=1.4.0, <1.6.2 || >=1.7.0, <1.9.3 || >=1.10.0, <1.11.1 · fixed in 1.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1

OS command injection in Atlassian Bamboo Data Center

• Atlassian Bamboo Data Center
• Command injection

Dolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions

• Command injection

<=22.0.4 · no fixed version yet

FreePBX api module Command Injection via GraphQL

• FreePBX api
• Command injection

Command Injection Vulnerability in Quantum Networks Router QN-I-470

• Quantum Networks Router QN-I-470
• Command injection

NewSoft｜NewSoftOA - OS Command Injection

• NewSoftOA
• Command injection

Lawnchair vulnerable to Command Injection via unquoted workflow dispatch input in release_update.yml

• lawnchair
• Command injection

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter.

• Command injection

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter.

• Command injection

Command Injection and Docker container escape allows root on host machine

• reconurge flowsint
• Command injection