Command injection.

HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection

• HKUDS nanobot
• Command injection

NexTOR IP Changer Unsafely Uses sudo and shell=True

• 0x5t4l1n NexTOR_IP_CHANGER
• Command injection
• Privilege escalation

NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution

• 0x5t4l1n NexTOR_IP_CHANGER
• Command injection
• Memory corruption

jsii-diff: Command Injection via npm: package argument

• Command injection

<1.131.0 · fixed in 1.131.0

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

• Command injection

<3.1.58 · fixed in 3.1.58

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)

• Other injection
• Command injection

<3.1.58 · fixed in 3.1.58

GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

• Command injection
• Code injection

<3.1.58 · fixed in 3.1.58

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite

• Command injection

<3.1.58 · fixed in 3.1.58

Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

PHP_CodeSniffer gitblame report command injection via crafted filename

• Command injection

<3.13.6 || >=4.0.0, <4.0.2 · fixed in 3.13.6, 4.0.2

WGDashboard Remote Code Execution vulnerability

• WGDashboard
• Command injection

sysPass FileBackupService Authenticated OS Command Injection via Backup Path

• nuxsmin sysPass
• Command injection

NocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection

• NocteDefensor LudusMCP
• Other injection
• Command injection

NocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injection

• NocteDefensor LudusMCP
• Other injection
• Command injection

LeeSinLiang godot-mcp create_scene/add_node index.ts executeOperation command injection

• LeeSinLiang godot-mcp
• Other injection
• Command injection

OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec

• Bohdan Triapitsyn OpenChamber
• Command injection

OS command injection in Dell Virtual Storage Integrator for VMware vSphere Client

• Dell Virtual Storage Integrator for VMware vSphere Client
• Command injection

MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

• MissionSquad mcp-api
• Other injection
• Command injection

Kino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injection

• Kino-Kafkaesque ssh-mcp-server
• Other injection
• Command injection

Shibby Tomato wanoptions sub_40F88C os command injection

• Shibby Tomato
• Command injection

Shibby Tomato qoslimit new_qoslimit_start os command injection

• Shibby Tomato
• Command injection

Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection

• Shibby Tomato
• Command injection

OpenHands send_pull_request.py initialize_repo command injection

• OpenHands
• Other injection
• Command injection

nearai ironclaw shell.rs classify_command_risk command injection

• nearai ironclaw
• Other injection
• Command injection

rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

• Command injection

<1.75.0 · fixed in 1.75.0

Unescaped deployment environment variables in generated setup commands

• Command injection

>=0.13.0, <0.18.7 || >=0.19.0, <0.19.9 · fixed in 0.18.7, 0.19.9

Electron: DevTools embedder handler executes arbitrary files via shell open

• Command injection

<39.8.9 || >=40.0.0-alpha.1, <40.9.2 || >=41.0.0-alpha.1, <41.2.1 || >=42.0.0-alpha.1, <42.0.0-beta.3 · fixed in 39.8.9, 40.9.2, 41.2.1, 42.0.0-beta.3

Langflow is affected by OS Command Injection in Model Context Protocol features

• IBM Langflow OSS
• Command injection

Langflow is affected OS Command Injection in Model Context Protocol features

• IBM Langflow OSS
• Command injection

IBM QRadar SIEM is vulnerable to remote code execution by privileged users

• IBM QRadar
• Command injection

Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename

• fledge
• Command injection

Command Injection in @oblique/cli

• Swiss Federal Office of Information Technology, Systems and Telecommunication @oblique/cli
• Command injection

backmeup (npm) - OS Command Injection via Backup Option Values

• adaltas backmeup
• Command injection

xidown - Argument Injection via Unterminated yt-dlp Command Line Construction

• indravoyager xidown
• Command injection

Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter

• inisev Backup Migration
• Command injection

HashBrown CMS - OS Command Injection via Git Deployer Branch Field

• HashBrownCMS hashbrown-cms
• Command injection

HashBrown CMS - OS Command Injection in Media Upload Thumbnail Generation

• HashBrownCMS hashbrown-cms
• Command injection

H3C NX15 esps repeaterproc command injection

• H3C NX15
• Other injection
• Command injection

H3C NX15 Backend RPC esps file.exec os command injection

• H3C NX15
• Command injection

H3C NX15 esps reload.reload_config command injection

• H3C NX15
• Other injection
• Command injection

H3C NX15 esps delete command injection

• H3C NX15
• Other injection
• Command injection

Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call

• CJCOLLIER Google::Auth
• Command injection
• CWE-829

H3C NX15 esps esps.ipv6.wan command injection

• H3C NX15
• Other injection
• Command injection

H3C NX15 esps add command injection

• H3C NX15
• Other injection
• Command injection

Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator

• Lenovo XClarity Orchestrator
• Command injection
• CWE-20

GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection

• GL.iNet AX1800
• Other injection
• Command injection

OS command injection in Zyxel WAX650S firmware

• Zyxel WAX650S firmware
• Command injection

GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V2…

• Command injection

GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 modem.so glc remove_profile command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count

• Command injection

<3.1.56 · fixed in 3.1.56

Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection

• Sangfor Operation and Maintenance Security Management System
• Command injection

ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

• ClearFoundation ClearOS
• Command injection

GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

Telenia TVox 26.5.3 OS Command Injection via action_audio.php

• Telenia Software TVox
• Command injection