CWE-78

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

A vulnerability was found in Jrohy trojan up to 2.15.3. It has been declared as critical. This vulnerability affects the

A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/p

A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability i

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an un

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privile

Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerabili

A vulnerability, which was classified as critical, has been found in MicroWorld eScan Antivirus 7.0.32 on Linux. Affecte

A vulnerability was determined in neurobin shc up to 4.0.3. This vulnerability affects the function make of the file src

A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interf

Multiple instances of an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu

A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches

A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as cri

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affect

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of

gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value.

An issue was discovered on NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic/radio endpoint is vuln

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows rem

A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by t

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the

A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects t

A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of t

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part o

A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part o

A vulnerability was identified in Ruijie WS7204-A 2017.06.15. Affected by this vulnerability is an unknown functionality

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of th

A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function o

IBM Lakehouse (watsonx.data 2.2) could allow an authenticated privileged user to execute arbitrary commands on the syste

A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117. This affects an unknown part of the file /view

A security vulnerability has been detected in Wavlink WL-NU516U1 240425. This vulnerability affects the function sub_401

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listActi

A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdater_main of the file rgbin of

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0

A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub_416898 of

A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub_416990 of the file /boafrm/form

A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub_44CCE4 of the file /boafrm

When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with sp

An example dag `example_dag_decorator` had non-validated parameter that allowed the UI user to redirect the example to a

A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerab

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remote_uploa

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command inj

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows at

Meshtastic is an open source mesh networking solution. The main_matrix.yml GitHub Action is triggered by the pull_reques