Command injection.

Dokploy: Command Injection via Unescaped Git URL in Clone Commands

• dokploy
• Command injection

CyberPanel 2.4.3 Authenticated Command Injection via starRemoteTransfer

• usmannasir cyberpanel
• Command injection

Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`

• dokploy
• Command injection

Dokploy: Command Injection via Docker Credentials in buildRemoteDocker

• dokploy
• Command injection

Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE

• dokploy
• Command injection

Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection

• dokploy
• Command injection
• Broken access control

Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)

• dokploy
• Command injection
• CWE-20

Dokploy: OS Command Injection via compose `composePath`

• dokploy
• Command injection

Dokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE

• dokploy
• Command injection

Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`

• dokploy
• Command injection

Dokploy: Command Injection via Compose Shell Execution

• dokploy
• Command injection

Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter

• dokploy
• Command injection

Dokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE

• dokploy
• Command injection

Dokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution

• dokploy
• Command injection

Dokploy: OS Command Injection via `databaseName` / `backupFile` in database restore

• dokploy
• Command injection

Apache Ranger has a Command Injection vulnerability

• Command injection

>=0.6.0, <=2.8.0 · no fixed version yet

Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection

• Zyxel Networks WAH7601
• Command injection

alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field

• alseambusher crontab-ui
• Command injection

duhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints

• duhow xiaoai-patch
• Command injection

NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server

• NASA HyperCP
• Command injection

4xmen pm2panel - Authenticated OS Command Injection via id Query Parameter

• 4xmen pm2panel
• Command injection

EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection

• EFM ipTIME AX8004M
• Command injection

Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection

• Shenzhen Aitemi M300 Wi-Fi Repeater
• Other injection
• Command injection

Tenda CH22 CertListInfo formCertListInfo command injection

• Tenda CH22
• Other injection
• Command injection

NightTrek Ollama-mcp index.ts command injection

• NightTrek Ollama-mcp
• Other injection
• Command injection

NightTrek Supabase-MCP generate_types command injection

• NightTrek Supabase-MCP
• Other injection
• Command injection

NellyW8 MCP4EDA run_openlane/view_waveform command injection

• NellyW8 MCP4EDA
• Other injection
• Command injection

andreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection

• andreahaku codex_mcp
• Other injection
• Command injection

MSI Radix AXE6600 v781521 Command Injection via openvpn function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via macfilter

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via porTrigger function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via portFw function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via alg function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via dmz Function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via accesscontrol Function

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via urlfilter

• MSI Radix AXE6600
• Command injection

MSI Radix AXE6600 v781521 Command Injection via wps.cgi

• MSI Radix AXE6600
• Command injection

D-Link DWR-M961 Command Injection via app.cgi

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formWsc

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formNtp

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formSmsManage

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom

• D-Link Corporation DWR-M961
• Command injection

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel

• D-Link Corporation DWR-M961
• Command injection

MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection

• MauricioMilano coder-api
• Other injection
• Command injection

andreahaku llm_memory_mcp GitHooksManager.ts auto.capture command injection

• andreahaku llm_memory_mcp
• Other injection
• Command injection

adolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts generateChart command injection

• adolfosalasgomez3011 slidev-builder-mcp
• Other injection
• Command injection

MIMICLab mcp-pdf-vision index.ts load_pdf command injection

• MIMICLab mcp-pdf-vision
• Other injection
• Command injection

abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection

• abdullah1854 MCPGateway
• Other injection
• Command injection

Kirachon context-engine review-git-diff Endpoint gitUtils.ts execGitCommand command injection

• Kirachon context-engine
• Other injection
• Command injection

INQUIRELAB mcp-bridge-api Servers Endpoint mcp-bridge.js command injection

• INQUIRELAB mcp-bridge-api
• Other injection
• Command injection

Workspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extension

• Shopify ruby-lsp
• Command injection