CWE-749.

FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands

• signalwire freeswitch
• Command injection
• CWE-749

SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

• sharpemu
• Authentication bypass
• Cross-site request forgery (CSRF)

Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application

• Tata Motors iRA 2.0
• Tata Motors iRA.ev
• CWE-346
• CWE-749

Elo backends have code injection via unvalidated emission of programmatic AST fields

• SQL injection
• Code injection

<1.0.1 · fixed in 1.0.1

Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host

• Temporal Technologies, Inc. Temporal Server
• Command injection
• Broken access control

Unrestricted Command Execution via system.execute

• Apereo Foundation openEQUELLA
• Command injection
• CWE-749

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability

• Alpine iLX-F511
• CWE-749

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability

• Alpine iLX-F511
• CWE-749

Dynamic Library Loading Process Control in Autodesk Fusion Desktop

• Autodesk Fusion
• CWE-749

Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives

• grav
• CWE-749

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

• Path traversal
• Code injection

>=8.0.0, <8.6.19 || >=9.0.0, <9.1.21 || >=10.0.0, <10.6.2 || >=11.0.0-alpha.0, <11.0.0-alpha.6 · fixed in 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6

Cisco Unified Communications Manager Improper Access Control Vulnerability

• Cisco Unified Communications Manager
• CWE-749

OnePlus OxygenOS exposed dangerous method vulnerability

• OnePlus OxygenOS
• Broken access control
• CWE-749

Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool

• apconw Aix-DB
• CWE-749

Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@

• grav
• CWE-749

Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler

• shd101wyy vscode-markdown-preview-enhanced
• CWE-749

Ivanti Neurons Patch for Intune: An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote…

• Ivanti Neurons Patch for Intune
• CWE-749

Broken Access Control in SAP NetWeaver Visual Composer

• SAP_SE SAP NetWeaver Visual Composer
• CWE-749

EdgeEver Desktop 1.92.0 through 1.112.0 Local Program Execution via ACP IPC

• tianma-if EdgeEver
• CWE-749

NetEase Cloud Music RCE via os.navigateExternal IPC

• NetEase Cloud Music for Windows
• CWE-749

Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine

• Smart Media4U Technology SHAREit App
• CWE-749

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

• Command injection
• CWE-749

<3.1.3 · fixed in 3.1.3

MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

• MISP
• Broken access control
• CWE-749

Payload: Insufficient Access Control in Stripe REST Proxy

• Broken access control
• CWE-749

<3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34

Joyland AI WebView command injection

• Joyland.ai
• CWE-749

Flowring Agentflow 4.0 - Exposed Dangerous Method or Function

• Flowring Technology Corp Agentflow 4.0
• CWE-749

Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

• Progress Software Progress® Telerik® Fiddler® Everywhere
• CWE-749

Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

• Qualcomm, Inc. Snapdragon
• CWE-749

MaxKB: Prompt-injectable agent can lead to command execution

• 1Panel-dev MaxKB
• Command injection
• Privilege escalation

Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host

• Temporal Technologies, Inc. Temporal Server
• Command injection
• CWE-749

Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode

• Acode
• Broken access control
• CWE-749

Unsoundness in UTF-8 'String' trait

• CWE-749

>=0.0.0-0, <0.10.0 || >=0.11.0-0 · fixed in 0.10.0

Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

• Server-side request forgery (SSRF)
• CWE-20

>=6.0.2, <6.7.0 · fixed in 6.7.0

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

• Cisco Enterprise NFV Infrastructure Software
• Cisco Unified Computing System (Managed)
• CWE-749

electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge

• electerm
• CWE-749

ASUS Armoury Crate: Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a…

• ASUS Armoury Crate
• CWE-749

asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

• CWE-693
• CWE-749

<1.0.9 · fixed in 1.0.9

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

• Parallels RAS Client
• CWE-749

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

• Parallels RAS Client
• CWE-749

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

• Parallels RAS Client
• CWE-749

GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates

• CWE-749

<2.27.0 · fixed in 2.27.0

Streambert : Insecure Protocol Execution in open-external IPC Handler

• truelockmc streambert
• CWE-20
• CWE-749

Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

• Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Advanced Cluster Management for Kubernetes 2.13
• CWE-749

Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler

• truelockmc streambert
• CWE-20
• CWE-749

Azure Confidential Ledger Remote Code Execution Vulnerability

• Microsoft Azure Confidential Ledger
• CWE-749

H3C NX15 Web API esps service.add routine

• H3C NX15
• CWE-749

In apusys, there is a possible escalation of privilege due to a missing bounds check.

• MediaTek, Inc. MediaTek chipset
• CWE-749

`nx graph` dev server permissive CORS policy

• CWE-749
• CWE-942

>=17.0.4, <22.7.2 || >=23.0.0-beta.0, <23.0.0-beta.2 · fixed in 22.7.2, 23.0.0-beta.2

Exposed Reboot via Modbus

• Phoenix Contact CHARX SEC-3150
• Phoenix Contact CHARX SEC-3100
• CWE-749

webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

• Cross-site request forgery (CSRF)
• CWE-749

<5.2.6 · fixed in 5.2.6

ownCloud Core: Updater has an exposed dangerous method or function

• ownCloud Core
• CWE-749

Microsoft Edge (Chromium-based) Spoofing Vulnerability

• Microsoft Edge (Chromium-based)
• Authentication bypass
• CWE-749

Appsmith: Caddy admin API exposed without authentication

• appsmith
• CWE-749
• CWE-1188

@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)

• CWE-749

>=3.15.4, <3.21.7 || >=4.0.0, <4.4.7 · fixed in 3.21.7, 4.4.7

Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription

• gitroomhq postiz-app
• Broken access control
• CWE-345

Vitest Browser: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE

• Broken access control
• CWE-749

<0.1.24 · fixed in 0.1.24

Hepta Platforms｜Heptabase - Exposed Dangerous

• Hepta Platforms Heptabase
• CWE-749

Lenovo Application: A vulnerability was identified in the Lenovo Android Application…

• Lenovo Application
• CWE-749

Arbitrary File Read, Write, Rename, and Delete in Logseq

• logseq
• CWE-749

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

• Broken access control
• CWE-749

>=20.0.0, <20.1.1 · fixed in 20.1.1