Command injection.

Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection

• GNOME NetworkManager-iodine
• Command injection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Command injection

misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values

• misp-modules
• Command injection

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint.

• Command injection

Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

• Maple Media Root Browser Classic
• Command injection

jhen0409 react-native-debugger Open in Editor window.js openDevTools os command injection

• jhen0409 react-native-debugger
• Command injection

OS command injection in Eufy Omni C20, Omni X10 Pro

• Eufy Omni C20
• Eufy Omni X10 Pro
• Command injection

Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface

• Honeywell PD45 Industrial Printer
• Path traversal
• Command injection

Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040

• Honeywell PD45 Industrial Printer
• Command injection
• Authentication bypass

Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

• Termix
• Command injection

Termix: Command injection in SSH key deployment verification

• Termix
• Command injection

Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root

• dokploy
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

PaperCut NG/MF: Remote Code Execution via Scan2Fax

• PaperCut NG/MF
• Path traversal
• Command injection

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service

• Brocade SANnav
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Command injection

Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a

• Brocade SANnav
• Command injection

Argument injection in WebPros WP Toolkit for cPanel

• WebPros WP Toolkit for cPanel
• Command injection

OS command injection in WebPros Plesk extension "Site Import"

• WebPros Plesk extension "Site Import"
• Command injection

Automation-controller: automation-controller: systemjob extra_vars.days argument injection into uncontainerized control-plane awx-manage process

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Command injection

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting

• Command injection

>=5.12.0, <7.3.0 · fixed in 7.3.0

Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane pod

• Red Hat Ansible Automation Platform 2.4 for RHEL 8
• Red Hat Ansible Automation Platform 2.4 for RHEL 9
• Command injection

Automation-controller: automation-controller-container: automation-controller: ad-hoc command limit field allows cli argument injection into ansible executable

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Command injection

Automation-controller: automation-controller-container: automation-controller: schedule and workflowjobtemplatenode scm_branch prompt bypasses leading-dash git-argument guard

• Red Hat Ansible Automation Platform 2.5 for RHEL 8
• Red Hat Ansible Automation Platform 2.5 for RHEL 9
• Command injection

NetworkManager-l2tp Privilege Escalation via pppd Username Injection

• nm-l2tp NetworkManager-l2tp
• Command injection

Frictionless OS Command Injection via explore Console Command

• frictionlessdata frictionless-py
• Command injection

Remote Code Execution vulnerability

• Zohocorp ManageEngine OpManager
• Command injection

Command Injection vulnerability

• Zohocorp ManageEngine OpManager
• ZohoCorp ManageEngine Firewall Analyzer
• Command injection

Changing｜CGServiSign - OS Command Injection

• Changing CGServiSign
• Command injection

MQTT WebSocket Command Execution Vulnerability in NitroSense

• Acer NitroSense V5
• Command injection
• Authentication bypass

OS command injection in OpenEye Apex Network Video Recorder (NVR)

• OpenEye Apex Network Video Recorder (NVR)
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Command injection

Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

• Command injection

>=3.0.0, <3.10.0 · fixed in 3.10.0

KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

• Command injection

>=1.12.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1 · fixed in 1.21.2, 1.22.2, 1.23.1

KubeEdge: ConfigUpdateJob updateFields enables remote shell injection and code execution on edge nodes

• Command injection

>=1.21.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1 · fixed in 1.21.2, 1.22.2, 1.23.1

Authenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engine (ALE)

• Hewlett Packard Enterprise (HPE) ALE
• Command injection

Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection

• Moonshot AI Kimi Code
• Command injection

Softaculous Virtualizor OS Command Injection via Billing Module Handler

• Softaculous Virtualizor
• Command injection

Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog

• notepad-plus-plus
• Command injection
• CWE-345

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Command injection

OS command injection in NVIDIA Infrastructure Controller

• NVIDIA Infrastructure Controller
• Command injection

Command injection in NVIDIA NeMo Speech

• NVIDIA NeMo Speech
• Command injection

D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface

• D-LINK DAP-1360
• Command injection

Remote code execution vulnerability

• Zohocorp ManageEngine ADSelfService Plus
• Command injection