Command injection.

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

• MariaDB server
• Command injection

PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• Command injection

Dracut: dracut: root code execution via dhcp options command injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

• mate-desktop atril
• Command injection
• CWE-829

Command Injection Vulnerability in OpenVPN on Multiple TP-Link Archer Routers

• TP-Link Systems Inc. Archer AX12 V1
• TP-Link Systems Inc. Archer AX18 v1
• Command injection

Potential local privileges escalation through argument injection in the nxchmod.sh script

• NoMachine
• Command injection

Roxy-WI: Authenticated RCE via 'configver' URL parameter (os.system sink in /config/versions/.../save)

• roxy-wi
• Command injection

Roxy-WI: Authenticated RCE on every managed HAProxy load balancer via `option` field config injection in section save

• roxy-wi
• Command injection
• Code injection

Roxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save `config_file_name`

• roxy-wi
• Path traversal
• Command injection

Ghidra < 12.1- Command Injection via URL Annotation Click

• nationalsecurityagency ghidra
• Command injection

QTS, QuTS hero

• QNAP Systems Inc. QTS
• QNAP Systems Inc. QuTS hero
• Command injection

QTS, QuTS hero

• QNAP Systems Inc. QTS
• QNAP Systems Inc. QuTS hero
• Command injection

QTS, QuTS hero

• QNAP Systems Inc. QTS
• QNAP Systems Inc. QuTS hero
• Command injection

QTS, QuTS hero

• QNAP Systems Inc. QTS
• QNAP Systems Inc. QuTS hero
• Command injection

Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter

• Command injection

>=2.0.1, <2.0.4 · fixed in 2.0.4

Net::IMAP: Command Injection via ID command argument

• Command injection
• Other injection

<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1

Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument

• Command injection
• Other injection

<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1

Hermes WebUI < 0.51.311 RCE via Git Configuration Injection

• nesquena hermes-webui
• Command injection

OS command injection in Ivanti Endpoint Manager Mobile

• Ivanti Endpoint Manager Mobile
• Command injection

OS command injection in Fortinet FortiSandbox and others

• Fortinet FortiSandbox
• Fortinet FortiSandbox Cloud
• Command injection

shell-quote quote() does not escape newlines in object .op values

• Command injection

>=1.1.0, <1.8.4 · fixed in 1.8.4

OS command injection in ivanti Sentry

• ivanti Sentry
• Command injection

Shell command injection in Logseq

• logseq
• Command injection

OS command injection in Siemens SINEC INS

• Siemens SINEC INS
• Command injection

degit has a Command Injection issue

• Command injection

<2.8.6 || >=3.0.0, <3.3.1 · fixed in 2.8.6, 3.3.1

DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.

• Command injection

Nginx Proxy Manager Authenticated RCE via setupCertbotPlugins()

• NginxProxyManager nginx-proxy-manager
• Command injection

OS command injection in Devolutions Server

• Devolutions Server
• Command injection

Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection

• Tenda F451
• Command injection

Command Injection in Archer MR600 WireGuard Client Configuration

• TP-Link Systems Inc. Archer MR600 v5
• TP-Link Systems Inc. Archer MR600 v2
• Command injection

OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload

• openbullet2
• Command injection

Neovim View Branch secure.lua M.read command injection

• Neovim
• Other injection
• Command injection

FoundationAgents MetaGPT common.py check_cmd_exists command injection

• FoundationAgents MetaGPT
• Other injection
• Command injection

GL.iNet GL-MT3000 SET_USER_PWD glc FUN_0042e200 command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 FTP Protocol glc snprintf command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 Path Normalization dlopen command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 LuCI JSON-RPC rpc rpc_sys command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

vertex-app vertex Log Viewer Endpoint LogMod.js os command injection

• vertex
• Command injection

GL.iNet MT3000 OpenVPN Client Import Workflow ovpnclient.sh command injection

• GL.iNet MT3000
• Other injection
• Command injection

Arista Edge Threat Management NGFW UI Arbitrary Command Execution

• Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)
• Command injection

Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection

• Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)
• Command injection

Arista Edge Threat Management NGFW Reports Application Insecure Input Validation

• Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)
• Command injection

Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection

• ubccr xdmod
• Command injection

Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection

• Arista Networks Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)
• Command injection

HAX CMS Vulnerable to Command Injection using Git.php

• haxtheweb haxcms-php
• Command injection

Authenticated Remote Code Execution via File Overwrite

• haxtheweb haxcms-nodejs
• haxtheweb haxcms-php
• Path traversal
• Command injection

Termix Vulnerable to Arbitrary Command Execution in File Manager

• Termix
• Command injection
• Broken access control

Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection

• Termix
• Command injection

Termix has an OS Command Injection in File Manager resolvePath endpoint

• Termix
• Command injection

Markdown Preview Enhanced OS Command Injection in External File and Link Opening

• shd101wyy Markdown Preview Enhanced
• Command injection

D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection

• D-Link DWR-M920
• Command injection

Authenticated Remote Code Execution via loadReader functionName code injection in DbGate

• Command injection

<7.1.9 · fixed in 7.1.9

D-Link DWR-M920 formUSSDSetup sub_41CF20 command injection

• D-Link DWR-M920
• Other injection
• Command injection

MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

• Command injection

<3.7.0 · fixed in 3.7.0

ansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code execution

• Command injection

<2.16.19rc1 || >=2.17.0b1, <2.18.18rc1 || >=2.19.0b1, <2.19.11rc1 || >=2.20.0b1, <2.20.7rc1 || >=2.21.0b1, <2.21.1rc1 · fixed in 2.16.19rc1, 2.18.18rc1, 2.19.11rc1, 2.20.7rc1, 2.21.1rc1

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API

• HCLSoftware Digital Experience
• Command injection

D-Link DWR-M920 formSmsManage sub_41C8E8 command injection

• D-Link DWR-M920
• Other injection
• Command injection

Shibby Tomato Web UI rstats rstats_path os command injection

• Shibby Tomato
• Command injection