https://advisories.gitlab.com/npm/json-logic-js/CVE-2021-4329/
json-logic-js Command Injection vulnerability | GitLab Advisory Database (GLAD)
CVE-2021-4329 json-logic-js Command Injection vulnerability: A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0. Affected...
command injectionjsonlogicvulnerabilitygitlab
https://security.snyk.io/vuln/SNYK-JS-WINDOWCONTROL-3186345
Command Injection in window-control | CVE-2022-25926 | Snyk
High severity (7.4) Command Injection in window-control | CVE-2022-25926
command injectionwindow controlcvesnyk
https://community.f5.com/discussions/technicalforum/ltm--smtps-command-injection/179617
LTM :: SMTPS Command Injection | DevCentral
It seems the SMTPS profile on the LTM allows command injection. It is detected as: SMTP Service STARTTLS Plaintext Command Injection (52611) :: The remote...
command injectionltmsmtpsdevcentral
https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cimc-cmd-inj-3hKN3bVt.html
Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities...
Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to...
remote code executionintegrated managementcommand injectionciscocontroller
https://www.cybersecuritydive.com/news/command-injection-flaw-fortinet-fortiweb-exploitation/806027/?ref=secretciso.org
Researchers warn command injection flaw in Fortinet FortiWeb is under exploitation | Cybersecurity...
The medium severity vulnerability can be chained together with a critical flaw in the same product, which could help attackers gain additional capabilities.
command injectionresearcherswarnflawfortinet
https://guard-api.com/guides/how-to-fix-command-injection-in-bottle/
Fix Command Injection in Bottle | GuardAPI Security Guide
command injectionsecurity guidefixbottle
https://research.averlon.ai/vulnerability-intelligence/cve/GHSA-j5w5-568x-rq53
GHSA-j5w5-568x-rq53: Evolver: Command Injection via `execSync` in `_extractLLM()` function allows...
### Summary A command injection vulnerability in the `_extractLLM()` function allows attackers to execute arbitrary shell commands on the server. The function...
command injectionghsaevolverviaexecsync
https://devhub.checkmarx.com/cve-details/cve-2009-2881/
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') -...
Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter to (1) index.php...
used incommand injectionimproperspecialelements
https://www.netservicesgroup.com/msrc-blog-alerts/cve-2026-39881-vim-ex-command-injection-in-vims-netbeans-integration/
CVE-2026-39881 Vim Ex command injection in Vims NetBeans integration - Network Services Group
Apr 10, 2026 - Information published.
command injectionnetwork servicescvevimex
https://www.sentinelone.com/vulnerability-database/cve-2026-30809/
CVE-2026-30809: Pandora FMS OS Command Injection Flaw
CVE-2026-30809 is an OS command injection vulnerability in Pandora FMS. Learn about its impact, affected versions, and mitigation methods.
command injectioncvepandorafmsos
https://pentest-tools.com/vulnerabilities-exploits/digiever-ds-2105-pro-command-injection_28605
Digiever DS-2105 Pro - Command Injection (CVE-2023-52163) - Vulnerability & Exploit Database
The risk exists that a remote unauthenticated attacker can fully compromise the server to steal confidential information, install ransomware, or pivot to the...
command injectionexploit databasedsprocve
https://s4e.io/tools/hikvision-ip-camera-nvr-unauthenticated-rce-cve-2021-36260
CVE-2021-36260 scanner - Command Injection vulnerability in Hikvision
Detects 'Command Injection' vulnerability in Hikvision.
command injectioncvescannervulnerabilityhikvision
https://soc.cyber.wa.gov.au/advisories/20240702002-Cisco-NX-OS-Vulnerability/
Cisco NX-OS Software CLI Command Injection Vulnerability - 20240702002 - WA Cyber Security Unit...
command injectioncyber securitycisconxos
https://cvefeed.io/vuln/detail/CVE-2024-39602
CVE-2024-39602 - Wavlink False Sense Executable Command Injection
Aug 21, 2025 - An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request...
command injectioncvewavlinkfalsesense
https://stinner-it.com/tp-link-archer-ax-21-command-injection-vulnerability-cve-2023-1389-exploited-in-the-wild-27/
TP-Link Archer AX-21 Command Injection Vulnerability (CVE-2023-1389) Exploited in the Wild |...
in the wildtp linkcommand injectionarcherax
https://khalil-shreateh.com/khalil.shtml/it-highlights/security-research/44171-lg-simple-editor-3-21-0-remote-command-injection.html
LG Simple Editor 3.21.0 Remote Command Injection | khalil shreateh
LG Simple Editor version 3.21.0 is affected by a critical LG Simple Editor version 3.21.0 is affected by a critical Remote Command Injection (RCI)...
simple editorremote commandlginjectionkhalil
https://bugs.kali.org/bug_relationship_graph.php?bug_id=2201&graph=relation
0002201: commix - command injection and exploitation tool - Kali Linux Bug Tracker
command injectionkali linuxbug trackercommixexploitation
https://www.sherlockforensics.com/blog/2026-04-28-cve-2026-7211.html
CVE-2026-7211: A weakness has been Command injection -
Apr 28, 2026 - A weakness has been command injection (CVE-2026-7211) scores CVSS 7.3 HIGH. Analysis of affected systems and remediation steps.
has beencommand injectioncveweakness
https://courses.davidbombal.com/courses/mastering-command-injection-the-ultimate-hands-on-course/lectures/49523732
Lab #1 OS command injection, simple case | David Bombal
command injectionlabossimplecase
https://tryhackme.com/room/oscommandinjection
TryHackMe | Command Injection
Learn about a vulnerability allowing you to execute commands through a vulnerable app, and its remediations.
command injection
https://aviatrix.ai/threat-research-center/vmware-aria-operations-2026-command-injection-vulnerability/
VMware Aria Operations 2026 Command Injection Vulnerability
A critical command injection vulnerability in VMware Aria Operations (CVE-2026-22719) allows unauthenticated attackers to execute arbitrary commands, leading...
aria operationscommand injectionvmwarevulnerability
https://infinitsec.net/posts/cve-2026-40502-openharness-remote-administrative-command-injection-via-gateway-handler
Report: Ultimate Guide: CVE-2026-40502 - OpenHarness Remote Administrative Command Injection via...
Apr 16, 2026 - CVE ID :CVE-2026-40502 Published : April 16, 2026, 1:16 a.m. | 1 hour, 31 minutes ago Description :OpenHarness prior to commit dd1d235 contains a command...
ultimate guidecommand injectionreportcveremote
https://www.invicti.com/web-application-vulnerabilities/moodle-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-cve-2017-2641
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.... Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL...
used incommand injectionmoodleimproperspecial
https://www.exploit-db.com/exploits/1755
AWStats 6.5 - 'migrate' Remote Shell Command Injection - CGI webapps Exploit
May 6, 2006 - AWStats 6.5 - 'migrate' Remote Shell Command Injection. CVE-25284CVE-2006-2237 . webapps exploit for CGI platform
shell commandawstatsmigrateremoteinjection
https://www.dlink.com/mk/mk/support/support-news/2023/october/26/dap-x1860-command-injection
DAP-X1860 Command Injection | D-Link
command injectiondap
https://vulert.com/vuln-db/almalinux-9-cockpit-139151
Moderate: Cockpit Security Update - Command Injection Vulnerability
Learn about the command injection vulnerability in Cockpit package in AlmaLinux 9 and how to fix it. Find answers to frequently asked questions and check your...
security updatecommand injectionmoderatecockpitvulnerability
https://www.show.it/cisco-patches-command-injection-flaw-in-ace-appliance/
Cisco Patches Command Injection Flaw in ACE Appliance - SecurityIT | Consulenza Sulla Sicurezza...
Feb 25, 2016 - Cisco has released software updates for its ACE 4710 appliance to address a high severity command injection vulnerability. read more
command injectionciscopatchesflawace