Command injection.

Kiloview E3 NDI Encoder OS Command Injection

• Kiloview E3 Firmware
• Command injection

Kiloview E3 NDI Encoder OS Command Injection

• Kiloview E3 Firmware
• Command injection

Kiloview E3 NDI Encoder OS Command Injection

• Kiloview E3 Firmware
• Command injection

Azure Pipelines Remote Code Execution Vulnerability

• Microsoft Azure Pipelines
• Command injection

Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options

• lxc incus
• Command injection

Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Authenticated Command Injection Vulnerabilities in AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Authenticated File Write leads to Command Injection Vulnerabilities in AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Authenticated Command Injection Vulnerabilities in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Authenticated Command Injection Vulnerabilities in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Improper Sanitization leads to Command Injection in AOS-8 Web Interface

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Unauthenticated Adjacent Command Injection Vulnerability in AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

Unauthenticated Command Injection Vulnerabilities in AOS-8

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Command injection

OS command injection in the Terraform hook in AWS SAM CLI

• aws-sam-cli
• Command injection

Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177

• Drupal Cloud
• Command injection

TOTOLINK A950RG product.so UploadCustomModule command injection

• TOTOLINK A950RG
• Other injection
• Command injection

virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax

• Command injection

<21.14.9 · fixed in 21.14.9

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

• Command injection

>=2.6.0, <13.0.0 · fixed in 13.0.0

Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration

• Apache Software Foundation Apache Traffic Server
• Command injection

virtualenv bash activate runs commands from an environment name with a backslash before $

• Command injection
• CWE-116

<21.14.7 · fixed in 21.14.7

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

• Command injection
• CWE-116

<21.14.4 · fixed in 21.14.4

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

• Command injection
• CWE-116

<21.14.2 · fixed in 21.14.2

virtualenv activation scripts run code from a path that contains a placeholder name

• Command injection
• Code injection

>=20.26.6, <21.14.2 · fixed in 21.14.2

Lagoon core ssh service vulnerable to remote code execution

• lagoon
• Command injection

OnePlus OxygenOS improper neutralization of special elements vulnerability

• OnePlus OxygenOS
• Command injection
• Broken access control

OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox

• Qingteng Host Adaptive Security Platform
• Command injection

OS command injection in Totolink

• Totolink
• Command injection

OS command injection in Totolink

• Totolink
• Command injection

OS command injection in Totolink

• Totolink
• Command injection

OS command injection in Totolink

• Totolink
• Command injection

OS command injection in Totolink

• Totolink
• Command injection

OS command injection in Totolink

• Totolink
• Command injection

OS command injection in Totolink

• Totolink
• Command injection

launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors

• Command injection

<2.14.2 · fixed in 2.14.2

launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

• Command injection

<2.14.2 · fixed in 2.14.2

launch-editor: escapeCmdArgs() omits % escaping on Windows

• Command injection

<2.14.2 · fixed in 2.14.2

Argo CD: A Kustomize remote ref can run commands in the repo-server

• argoproj argo-cd
• Command injection

Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler

• Wavlink WL-WN530BE1-A
• Command injection

aaPanel File Manager common.py ExecShell os command injection

• aaPanel
• Command injection

Apache CouchDB: Admin credentials leading to code execution as operating system user

• Apache Software Foundation Apache CouchDB
• Command injection

DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection

• DrayTek Vigor2960
• Other injection
• Command injection

DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection

• DrayTek Vigor2960
• Other injection
• Command injection

DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

• DrayTek Vigor2960
• Other injection
• Command injection

DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection

• DrayTek Vigor2960
• Command injection

DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection

• DrayTek Vigor2960
• Other injection
• Command injection

mcollina mcp-ripgrep Advanced Search Tool index.ts os command injection

• mcollina mcp-ripgrep
• Command injection

Command injection in Advantech ADAM-3600

• Advantech ADAM-3600
• Command injection

Command injection in Advantech ADAM-3600

• Advantech ADAM-3600
• Command injection

H3C Magic NX15 usrlist sub_416874 os command injection

• H3C Magic NX15
• Command injection

orbitale imagemagick-php Command.php font os command injection

• orbitale imagemagick-php
• Command injection

FusionPBX Dialplan Editor dialplan.php os command injection

• FusionPBX
• Command injection

JumpServer Template Rendering os command injection

• JumpServer
• Command injection

PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host

• StreamSoft PingTools Network Utilities
• Command injection

Camunda Expression Injection via orQueries RCE

• Camunda 7
• Command injection
• Code injection

BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys

• BentoML
• Command injection