CWE-78

Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_set_rat_mode via the rat

Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_radio_on_with_ia_apn via

Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_dial_call via the dialNu

Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_ims_on_with_apn via the

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI t

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior are vulnerable to Command

Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnera

Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Sch

Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without

Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without

Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (line 15) without sanit

Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without san

Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) with

Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) wit

Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac.php (line 18) without

Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech_text.php (line 18) withou

Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate_text.php (line 18) wit

Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe_amazon.php (line 15)

Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe.php (line 15) without

Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subtitles.php (line 19)

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability

Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to

9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-i

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function sy

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php en

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a command injection vulnerability in the optional

An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanitized user input in t

Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-en

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, a

AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-q

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagno

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options.

IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment variable

IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power en

GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>

The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spaw

An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to exe

Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated sy

OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execu

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injecti

A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injectio

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj