CWE-78

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote a

LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert pag

An issue in tiagorlampert CHAOS v5.0.1 before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae

There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthent

There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated

There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated

LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions p

Improper neutralization of special elements used in a command ('Command Injection') exists in SkyBridge MB-A100/MB-A110

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 firmwar

A remote code execution vulnerability exists in mintplex-labs/anything-llm due to improper handling of environment varia

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements us

A vulnerability in the parisneo/lollms-webui version 9.3 allows attackers to bypass intended access restrictions and exe

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows,

System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitr

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This

OS command injection vulnerability exists in awkblog v0.0.1 (commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552) and e

Remote Command program allows an attacker to get Remote Code Execution. As for the affected products/models/versions, se

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote

Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticat

In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This v

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress Wh

A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the applica

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, whi

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to ex

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly i

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly i

Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform

Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the mac parameter at ip/goform/Wr

The web services of Softnext's products, Mail SQR Expert and Mail Archiving Expert do not properly validate user input,

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim So

An issue in the handler function in /goform/telnet of Tenda FH1206 v02.03.01.35 allows attackers to execute arbitrary co

Command injection vulnerability in Asus RT-N15U 3.0.0.4.376_3754 allows a remote attacker to execute arbitrary code via

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcp

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_s

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacke

**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versi

A vulnerability in significant-gravitas/autogpt version 0.5.1 allows an attacker to bypass the shell commands denylist s

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenti

Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbP

Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromi

The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and