Command injection.

Shibby Tomato Web UI rc start_vpnserver os command injection

• Shibby Tomato
• Command injection

Microsoft M365 Copilot Remote Code Execution Vulnerability

• Microsoft 365 Copilot
• Command injection

M365 Copilot Information Disclosure Vulnerability

• Microsoft 365 Copilot
• Command injection

Shibby Tomato Web UI rc start_6rd_tunnel os command injection

• Shibby Tomato
• Command injection

Shibby Tomato Web UI rc start_dhcpc os command injection

• Shibby Tomato
• Command injection

nvm executes commands from a malicious Node.js mirror's version strings

• nvm
• Command injection

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

• Progress Software LoadMaster
• Progress Software ECS Connections Manager
• Command injection

Command Injection Vulnerability in GX Earth ONT Models

• GX INDIA GX Earth 2022
• GX INDIA GX Earth 1010
• Command injection

Supermicro BMC's SMTP service contains a command injection vulnerability

• SMCI AS-2115HS-TNR
• Command injection

VPN Command Injection Vulnerability

• Acer Connect M6E 5G Portable WiFi Router
• Command injection

Missing Per-Instruction Authorization Checks

• Acer Connect M6E 5G Portable WiFi Router
• Command injection

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Instruction Injection via FieldX MDM

• Acer Connect M6E 5G Portable WiFi Router
• Command injection

OS command injection in Cloud Foundry Foundation BOSH Director

• Cloud Foundry Foundation BOSH Director
• Command injection

OS command injection in Cloud Foundry Foundation BOSH

• Cloud Foundry Foundation BOSH
• Command injection

An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HT…

• Command injection

An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the at_command.asp interface

• Command injection
• Information disclosure

The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection.

• Command injection

launch-editor vulnerable to command injection via the crafted request on Windows

• Command injection

<2.9.0 · fixed in 2.9.0

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands via a crafted POST request.

• Command injection

elunez eladmin Application Deployment App.java command injection

• elunez eladmin
• Other injection
• Command injection

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Command injection

hiraishikentaro wezterm-mcp switch_pane/write_to_specific_pane wezterm_executor.ts os command injection

• hiraishikentaro wezterm-mcp
• Command injection

Tenant-controlled comma smuggles arbitrary CIFS mount options

• CloudFoundry Foundation smb-volume-release
• CloudFoundry Foundation CF Deployment
• Command injection

php-censor Webhook Endpoint GitBuild.php os command injection

• php-censor
• Command injection

GoClaw has a Command Injection issue

• Command injection

<=3.11.3 · no fixed version yet

zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection

• zhayujie chatgpt-on-wechat
• Command injection

TRENDnet TEW-432BRP formWlanSetup command injection

• TRENDnet TEW-432BRP
• Other injection
• Command injection

TRENDnet TEW-432BRP formSysCmd command injection

• TRENDnet TEW-432BRP
• Other injection
• Command injection

Edimax BR-6478AC POST Request formWlbasic command injection

• Edimax BR-6478AC
• Other injection
• Command injection

Edimax BR-6478AC POST Request formStaDrvSetup command injection

• Edimax BR-6478AC
• Other injection
• Command injection

Argument injection in JetBrains TeamCity

• JetBrains TeamCity
• Command injection

OS command injection in JetBrains IntelliJ IDEA

• JetBrains IntelliJ IDEA
• Command injection

Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint

• dokploy
• Command injection

Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline

• dokploy
• Command injection
• CWE-20

Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement

• dokploy
• Command injection

Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution

• dokploy
• Command injection
• Privilege escalation

Dokploy: Command Injection in /docker-container-logs Endpoint

• dokploy
• Command injection

Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion)

• dokploy
• Command injection

Dokploy: Remote Code Execution via destinationPath in Container File Upload

• dokploy
• Command injection

TRENDnet TEW-432BRP formWPS command injection

• TRENDnet TEW-432BRP
• Other injection
• Command injection

TRENDnet TEW-432BRP formSetRoute command injection

• TRENDnet TEW-432BRP
• Other injection
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

OS command injection in Waterfall WF-500

• Waterfall WF-500
• Command injection

Predator Connect W6x: RCE via MQTT

• Acer Predator Connect W6x
• Command injection

Predator Connect W6x: Web Interface Command Injection

• Acer Predator Connect W6x
• Command injection

Dulwich Vulnerable to Command Injection via Merge Driver Path

• Command injection

>=0.24.0, <1.2.5 · fixed in 1.2.5

AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill

• Mintplex-Labs anything-llm
• Command injection

ScadaBR Authenticated Remote Code Execution

• ScadaBR
• Command injection

Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions

• zed
• Command injection