Command injection.

Whisper-node through 1.1.1 OS Command Injection via filePath and language

• ariym whisper-node
• Command injection

@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir

• @mborne/extract
• Command injection

doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path

• zepspaiva doc-recog
• Command injection

buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name

• wastemobile buildebooks
• Command injection

pypdftk through 0.5 OS Command Injection via PDF and Output Paths

• revolunet pypdftk
• Command injection

webp-converter before 3.0.0 OS Command Injection via File Names and Options

• scionoftech webp-converter
• Command injection

office-converter through 1.0.2 OS Command Injection via fileName in generatePdf

• vworld4u office-converter
• Command injection

OS command injection in Dell Unisphere for PowerMax vApp

• Dell Unisphere for PowerMax vApp
• Command injection

Command injection in Dell Unisphere for PowerMax vApp

• Dell Unisphere for PowerMax vApp
• Command injection

OS Command in TR7 Cyber Defense's TR7 ASP

• TR7 Cyber Defense Inc. TR7 ASP
• Command injection

HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability

• Hewlett Packard Enterprise HPE NonStop Java JToolkit
• Command injection

Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task

• Koha
• Command injection

OS command injection in EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd and others

• EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd
• EG Secure Solutions Inc. SiteGuard Server Edition for Nginx
• Command injection

NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution

• NetBird
• Command injection
• CWE-116

OS command injection in Collabora Online - Built-in CODE Server

• Collabora Online - Built-in CODE Server
• Command injection

Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning

• Samsung Open Source QA-Board
• Command injection

OS command injection in Akamai Guardicore Platform Agent

• Akamai Guardicore Platform Agent
• Command injection

Persistent Command Execution

• Citrix UniconOS
• Command injection

Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

• Adobe Experience Manager 6.5 LTS
• Adobe Experience Manager 6.5
• Command injection

Moghtech Komodo contains an OS command injection vulnerability

• Komodo
• Command injection

VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling

• vnote
• Command injection

MultiTail: Shell injection in execute-on-match command handling

• folkertvanheusden multitail
• Command injection

Microsoft Office OneNote Remote Code Execution Vulnerability

• Microsoft 365 Apps for Enterprise
• Command injection

Windows Error Reporting Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Command injection

Azure CycleCloud Remote Code Execution Vulnerability

• Microsoft Azure CycleCloud 8.9.1
• Command injection

Windows Shell Security Feature Bypass Vulnerability

• Microsoft Edge (Chromium-based)
• Microsoft Outlook.com
• Command injection

Windows Update Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Command injection

Visual Studio Code Remote Code Execution Vulnerability

• Microsoft Visual Studio Code
• Command injection

KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

• KDE Dolphin
• Command injection

rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe

• NSPC911 rovr
• Command injection

Potential command execution on the host running JFrog CLI.

• jfrog-cli
• Command injection

OS command injection in Fortinet FortiManager and others

• Fortinet FortiManager
• Fortinet FortiManager Cloud
• Command injection

odt2spip < 4.4.0 OS Command Injection via Document Filename

• odt2spip
• Command injection

heym Python Tool Sandbox Escape

• heym
• Command injection
• Code injection

CVFS Command Execution

• Commvault Cloud
• Commvault Grid(HSX) CVFS
• Command injection

yt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Method

• marcopiovanello yt-dlp-web-ui
• Command injection

HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection

• HBAI-Ltd Toonflow-app
• Other injection
• Command injection

Wavlink WL-WN592AX6 wmapd system os command injection

• Wavlink WL-WN592AX6
• Command injection

Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection

• Wavlink WL-WN530BE1-A
• Command injection

Teltonika Command Injection in Backup function

• Teltonika Networks RUT
• Teltonika Networks RUTX
• Command injection

OS Command Injection in Yeoman-UI / Application Wizard Extension for VS Code

• SAP_SE SAP yeoman-ui
• Command injection

Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.

• Command injection

reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/re…

• Command injection

DataStage on Cloud Pak for Data Command Injection

• IBM DataStage on Cloud Pak for Data
• Command injection

IBM Maximo Application Suite - Location Service for Esri Component Code Execution

• IBM Maximo Application Suite - Location Service for Esri Component
• Command injection

GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py

• RVC-Boss GPT-SoVITS
• Command injection

easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function

• karuppiah7890 easy-pdf-merge
• Command injection

Netcore NR268 DDNS DDNSset.cgi execvp argument injection

• Netcore NR268
• Other injection
• Command injection

Edimax BR-6208AC formWlanMP command injection

• Edimax BR-6208AC
• Other injection
• Command injection

Edimax BR-6208AC formAutoFWupgrade command injection

• Edimax BR-6208AC
• Other injection
• Command injection

Edimax BR-6208AC formAccept command injection

• Edimax BR-6208AC
• Other injection
• Command injection

Grav Git Sync 1.0.2 through 3.4.12 Command Injection via Commit Author

• trilbymedia grav-plugin-git-sync
• Command injection

Linksys E1700 setLinksysIpv6 os command injection

• Linksys E1700
• Command injection

Linksys E1700 setDMZ os command injection

• Linksys E1700
• Command injection

Linksys E1700 Static Route addStaticRoute os command injection

• Linksys E1700
• Command injection

Command Injection in Ministry of Justice's UYAP Document Editor

• Ministry of Justice General Directorate of Information Technology UYAP Document Editor
• Command injection

mac-shell-mcp before 2.0.0 OS Command Injection via execute_command Arguments

• cfdude mac-shell-mcp
• Command injection

OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

• Dassault Systèmes Tuleap Enterprise Edition
• Command injection

agno-agi agno CodingTools coding.py agno.CodingTools.run_shell os command injection

• agno
• Command injection

TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection

• TRENDnet TEW-751DR
• TRENDnet TEW-752DRU
• Command injection