Command injection.

Shanghai Xi Yu Ji Zhi Technology Minimax Code Find os command injection

• Shanghai Xi Yu Ji Zhi Technology Minimax Code
• Command injection

WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection

• WAVLINK WN553X1-B
• Command injection

WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection

• WAVLINK WN553X1-B
• Command injection

WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection

• WAVLINK WN553X1-B
• Command injection

WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection

• WAVLINK WN553X1-B
• Command injection

WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection

• WAVLINK WN701AE
• Command injection

WAVLINK WN553X1-B ioos sub_416B50 os command injection

• WAVLINK WN553X1-B
• Command injection

WAVLINK WN553X1-B ioos Service sub_416D88 os command injection

• WAVLINK WN553X1-B
• Command injection

WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection

• WAVLINK WN701AE
• Command injection

WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection

• WAVLINK WL-WN530BE1-A
• Other injection
• Command injection

WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection

• WAVLINK WL-WN530HG4B
• Command injection

WAVLINK WN579X3-D wapi.cgi port_forward os command injection

• WAVLINK WN579X3-D
• Command injection

WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection

• WAVLINK WL-WN579A3-A
• Command injection

SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields

• SoftIron HyperCloud
• Command injection

Dream Displays has command-line argument injection in yt-dlp invocation

• arsmotorin dreamdisplays
• Command injection

ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks

• mqttsnet thinglinks
• Command injection
• Code injection

Pi-hole: Local privilege escalation from `pihole` user to root via CVE-2026-41489 fix bypass

• pi-hole
• Command injection

pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

• pgadmin.org pgAdmin 4
• Command injection
• Hard-coded credentials

pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier

• pgadmin.org pgAdmin 4
• Command injection
• CWE-115

Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line

• zuke
• Command injection

CVE-2026-118238

• Tenda W18E
• Command injection

@nx/maven and @nx/gradle have OS command injection via nx.json plugin options

• Command injection

>=21.0.0, <22.7.9 || >=23.0.0, <23.1.2 · fixed in 22.7.9, 23.1.2

OS command injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup

• Command injection

Argument injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

OS command injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

OS command injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

OS command injection in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Command injection

SQLite CLI through 3.54.1 Command Injection via .recover Output

• SQLite
• Command injection

OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting

• opnsense core
• Command injection

Dahua Intelligent Connection Center command injection

• Dahua Intelligent Connection Center
• Command injection

Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220

• Drupal Ffmpeg Image Toolkit
• Command injection

Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

• Rapid7 Insight Agent
• Command injection

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

• Command injection
• CWE-184

<4.6.78 · fixed in 4.6.78

OS Command Injection in Progress WS_FTP Server

• Progress Software WS_FTP Server
• Command injection

Command Injection via FTP Notification Variables in Progress WS_FTP Server

• Progress Software WS_FTP Server
• Command injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Command injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Command injection

OS command injection in Yamaha Corporation NWR100

• Yamaha Corporation NWR100
• Command injection

open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

• sindresorhus open
• modelcontextprotocol inspector
• Command injection

Authenticated RCE in update functionality in Guardian/CMC before 26.4.0

• Nozomi Networks Guardian
• Nozomi Networks CMC
• Command injection

nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed

• nvm
• Command injection
• Code injection

Unrestricted Command Execution via system.execute

• Apereo Foundation openEQUELLA
• Command injection
• CWE-749

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

• Command injection

<5.33.16 · fixed in 5.33.16

AVideo-Encoder: unauthenticated command execution through streamer login trust

• WWBN AVideo-Encoder
• Command injection

Volmarg Personal Management System through 2.1.0 OS Command Injection via Storage Folder Path

• Volmarg personal-management-system
• Command injection

CherryTree through 1.7.2 OS Command Injection via Custom Web Link Action

• giuspen cherrytree
• Command injection

Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution

• WSO2 Enterprise Integrator (BPS profile)
• WSO2 Business Process Server
• Command injection

Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

• Ultralytics
• Command injection

Alpine iLX-F511 diagapp Command Injection Vulnerability

• Alpine iLX-F511
• Command injection

Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Command injection

Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

• Juniper Networks Session Smart Conductor
• Command injection

Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Command injection

FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution

• fogproject
• Command injection
• Broken access control

Topluyo Desktop for Linux has an OS Command Injection issue

• topluyo App
• Command injection

HCL BigFix AEX is affected by multiple security vulnerabilities.

• HCL Software BigFix AEX
• Command injection
• Code injection

Unauthenticated Command Injection via kubeconfig Username in che-machine-exec

• Eclipse Foundation Eclipse Che
• Command injection

KaliFast Project Management Platform ei_git_repo_url OS Command Injection

• EISGE Kalifast
• Command injection

OS command injection in Dell PowerProtect Data Domain

• Dell PowerProtect Data Domain
• Command injection

OS command injection in Dell PowerProtect Data Domain Management Center

• Dell PowerProtect Data Domain Management Center
• Command injection