CWE-77

A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub_44CCE4 of the file /boafrm

A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown function

A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerab

A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remote_uploa

An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute a

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_wei

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to restrict command execution in archived

A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng

Command injection in some Zoom Clients for Windows may allow an authenticated user to conduct a disclosure of informatio

An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-writ

Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an att

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileg

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains

A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralizat

Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point

Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2,

Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a w

The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoin

The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and

Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects

Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue aff

(conda) Constructor is a tool which allows constructing an installer for a collection of conda packages. Prior to versio

Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfo

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unex

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a w

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions th

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Found

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user

A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via c

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to e

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Netwo

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inj

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject a

A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reli

Discord-Recon is a Discord bot created to automate bug bounty recon, automated scans and information gathering via a dis

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Cons

A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticate

The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input.

Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /

An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system fun

In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config