Command injection.

Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Permissions

• zed
• Command injection
• CWE-184

Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned .git/config

• zed
• Command injection

Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / WSL Remote)

• zed
• Command injection

Samba: remote code execution in samr

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Command injection

A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier ve…

• Command injection

A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlie…

• Command injection

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier…

• Command injection

A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier…

• Command injection

OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON

• microsoft UFO
• Command injection

Tanium addressed an unauthorized code execution vulnerability in Connect.

• Tanium Connect
• Command injection

Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address

• Command injection

<5.4.52 || >=6.0.0, <6.4.40 || >=7.0.0, <7.4.12 || >=8.0.0, <8.0.12 · fixed in 5.4.52, 6.4.40, 7.4.12, 8.0.12

pam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent

• mcdope pam_usb
• Command injection

pam_usb: PINENTRY_FALLBACK_APP environment variable allows arbitrary command execution

• mcdope pam_usb
• Command injection

pam_usb: Command injection via $TMUX environment variable leads to RCE as root

• mcdope pam_usb
• Command injection
• CWE-116

Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml

• sherlock
• Command injection

picoclaw is vulnerable to OS command injection via the ExecTool component

• Command injection

<=0.1.2 · no fixed version yet

Command injection via malicious configuration

• MB connect line mbNET/mbNET.rokey
• MB connect line mbNET.mini
• Command injection

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()

• OALDERS HTTP::Daemon
• Path traversal
• Command injection

Tanium addressed an unauthorized code execution vulnerability in Connect.

• Tanium Connect
• Command injection

Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary code via a crafted path that matches the improperly terminated search criteria of…

• Command injection

Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk_set.cgi endpoint.

• Command injection

@pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool.

• Command injection

Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle options.

• Command injection

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

• Command injection

<0.0.0-20260519062212-ffa59ce3aa78 · fixed in 0.0.0-20260519062212-ffa59ce3aa78

Lumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan

• prolix-oc Lumiverse
• Command injection

Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape

• prolix-oc Lumiverse
• Command injection

Lumiverse: RCE via MCP stdio argument injection

• prolix-oc Lumiverse
• Command injection

OS command injection in OpenVPN Inc OpenVPN Connect

• OpenVPN Inc OpenVPN Connect
• Command injection
• Privilege escalation

Twenty: SQL Injection via the timeZone field

• twenty
• Command injection
• SQL injection

haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection

• haojing8312 WorkClaw
• Command injection

Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runner

• VowpalWabbit vowpal_wabbit
• Command injection
• Code injection

Duplicate Advisory: gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

• Command injection

>=0.31.0, <0.83.0 · fixed in 0.83.0

luci-app-https-dns-proxy Authenticated Command Injection via setInitAction

• mossdef-org luci-app-https-dns-proxy
• Command injection

Samba: samba: remote code execution in printing subsystem via unescaped job description

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Prefect has an Argument Injection issue

• Command injection

<=3.6.18 · no fixed version yet

Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection

• Totolink N300RH
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection

• Totolink CA750-PoE
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection

• Totolink CA750-PoE
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injection

• Totolink CA750-PoE
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injection

• Totolink CA750-PoE
• Command injection

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin.

• Command injection

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin.

• Command injection

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin.

• Command injection

Totolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injection

• Totolink CA750-PoE
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injection

• Totolink CA750-PoE
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi NTPSyncWithHost os command injection

• Totolink CA750-PoE
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi setPasswordCfg os command injection

• Totolink CA750-PoE
• Command injection

Totolink CA750-PoE Setting cstecgi.cgi setWebWlanIdx os command injection

• Totolink CA750-PoE
• Command injection

Totolink A8000RU Web Management cstecgi.cgi setParentalRules os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi setIpQosRules os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection

• Totolink A8000RU
• Command injection

Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injection

• Totolink A8000RU
• Command injection

FoundDream miniclawd SkillsLoader skills-loader.ts which command injection

• FoundDream miniclawd
• Other injection
• Command injection

FoundDream miniclawd exec.ts ExecTool.execute os command injection

• FoundDream miniclawd
• Command injection