CWE-78

SmartLiving SmartLAN <=6.x contains an authenticated remote command injection vulnerability in the web.cgi binary throug

A vulnerability has been found in Sangfor Operation and Maintenance Management System up to 3.0.8. This vulnerability af

Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remot

Algo 8028 Control Panel version 3.3.3 contains a command injection vulnerability in the fm-data.lua endpoint that allows

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FT

OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, whic

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this iss

MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability. This vulnerability allows

Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability. This vulnerabilit

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remot

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remot

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remot

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remot

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remot

ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote a

ALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote a

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remot

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remot

LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app con

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated re

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated re

Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authentica

RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability. If exploited, an arbitrary O

OpenClaw (formerly Clawdbot) is a personal AI assistant you run on your own devices. Prior to 2026.1.29, a command inje

OS command injection vulnerability exists in ELECOM wireless LAN products. A crafted request from a logged-in user may l

Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to b

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, a

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a cri

Tenda G300-F router firmware version 16.01.14.2 and prior contain an OS command injection vulnerability in the WAN diagn

On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters

An issue was discovered in Pacom Unison Client 5.13.1. Authenticated users can inject malicious scripts in the Report Te

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user

An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuratio

A Command Injection vulnerability exists where an authenticated, remote attacker could execute arbitrary code on the und

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command

OpenClaw is a personal AI assistant. Versions 2026.1.8 through 2026.2.13 have a command injection in the maintainer/dev

Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerability allo

Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att

Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability. This vulnerabili

TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of

A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware

yt-dlp is a command-line audio/video downloader. Starting in version 2023.06.21 and prior to version 2026.02.21, when yt

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerabilit

The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series Sup

An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting

FreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5,

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary co