https://owasp.github.io/www-project-mcp-top-10/2025/MCP05-2025%E2%80%93Command-Injection&Execution
MCP05:2025 – Command Injection & Execution | OWASP Foundation
command injectionowasp foundationexecution
https://www.techgeeks.org/security-notice-tuleap-command-injection-cve-2026-84285/
Dassault Systèmes Warns of Tuleap Command Injection - TechGeeks
Affected Tuleap Enterprise builds permit operating-system command injection, but the public notice supplies no exact replacement build. Record the.
command injectiondassaultwarnstuleap
https://www.sentinelone.com/vulnerability-database/cve-2026-49003/
CVE-2026-49003: Critical Command Injection RCE Vulnerability
Sep 1, 2026 - CVE-2026-49003 is a command injection vulnerability enabling RCE attacks. Learn about its impact, system risks, and mitigation methods.
command injectionrce vulnerabilitycvecritical
https://devhub.checkmarx.com/cve-details/cve-2023-51450/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') -...
of specialin ancommand injectionimproperneutralization
https://advisories.gitlab.com/golang/github.com/megaease/easeprobe/CVE-2023-33967/
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | GitLab...
CVE-2023-33967 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'): EaseProbe is a tool that can do health/status checking. An...
of specialin ancommand injectionimproperneutralization
https://www.sentinelone.com/vulnerability-database/cve-2026-82082/
CVE-2026-82082: NUMail OS Command Injection RCE Vulnerability
Aug 28, 2026 - CVE-2026-82082 is a remote code execution vulnerability in NUMail by Green-Computing. Learn about its impact, affected versions, and mitigation methods.
command injectionrce vulnerabilitycve
https://unit42.paloaltonetworks.com/cve-2021-32305-websvn/?pdf=download&lg=en&_wpnonce=3ee8fbfd18
New Mirai Variant Targets WebSVN Command Injection Vulnerability (CVE-2021-32305)
Jun 6, 2024 - We provide analysis of and mitigations for exploits in the wild for a command injection vulnerability, CVE-2021-32305, affecting WebSVN.
command injectionnewmiraivarianttargets
https://codeant.ai/vulnerability-database/cve-2026-90699
OS Command Injection (CWE-78) in D-Link DWR-M920 Router
CVE-2026-90699 is a critical D-Link DWR-M920 flaw enabling remote OS command injection through PIN management, potentially allowing full device compromise.
command injectioncwedwrrouter
https://advisories.gitlab.com/composer/magento/community-edition/CVE-2019-7903/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | GitLab...
CVE-2019-7903 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'): A remote code execution vulnerability exists in...
of specialin ancommand injectionimproperneutralization
https://www.huawei.com/en/psirt/security-advisories/2016/huawei-sa-20160824-01-uma-en
Security Advisory - Two Command Injection Vulnerabilities in Huawei UMA
security advisorycommand injectiontwovulnerabilitieshuawei
https://cvefeed.io/vuln/detail/CVE-2025-56752
CVE-2025-56752 - Ruijie RG-ES Series Switch Unauthenticated Remote Command Injection Vulnerability
Jun 17, 2026 - A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them...
es seriescommand injectioncveswitchunauthenticated
https://www.netzilo.com/threats/atr-command-injection-in-create-mcp-server-stdio-via-unsafe-exec.html
Command Injection in create-mcp-server-stdio via Unsafe exec() Concatenation (CVE-2025-54994) — AI...
The create-mcp-server-stdio package builds shell commands by pasting tool arguments directly into exec() calls. If an attacker controls what goes into those...
create mcp servercommand injectionstdioviaunsafe
https://codeant.ai/vulnerability-database/cve-2026-90703
OS Command Injection (CWE-78) in D-Link DWR-M921 Router
CVE-2026-90703 affects D-Link DWR-M921 with a remotely exploitable OS command injection flaw, potentially allowing attackers to execute commands on the device.
command injectioncwedwrrouter
https://advisories.gitlab.com/npm/node-qpdf/CVE-2023-26155/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | GitLab...
CVE-2023-26155 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'): All versions of the package node-qpdf is vulnerable...
of specialin ancommand injectionimproperneutralization
https://cve.blacktree.nl/cve/CVE-2026-25089
CVE-2026-25089 / Fortinet FG-IR-26-141: Fortinet FortiSandbox OS Command Injection Vulnerability |...
Jul 17, 2026 - Fortinet FG-IR-26-141. Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an...
command injectioncvefortinetvulnerability
https://orbisappsec.com/blog/how-command-injection-vulnerabilities-happen-in-python-subprocess-calls
Python subprocess Command Injection Fix | Orbis AppSec
Sep 5, 2026 - Learn how unvalidated file paths in Python subprocess calls enable command injection. See the fix that adds proper path sanitization to fft.py.
command injectionpythonsubprocessfixorbis
https://www.techgeeks.org/security-notice-cve-2026-10520/
CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerability - TechGeeks
Ivanti Sentry command injection can permit unauthenticated root access when the appliance is unmanaged and vulnerable endpoints are externally reachable.
command injectioncveivantisentryvulnerability
https://turingpoint.de/en/advisories/tp-2026-071/
Collax Security Gateway: OS command injection in Postfix queue hold lets a delegated mailadmin run...
TP-2026-071: A delegated mailadmin reaches command execution as root through the unvalidated hold-action refvalue. ✓ Summary ✓ Root cause ✓ Proof of Concept ✓...
command injectionsecuritygatewaypostfixqueue
https://zuso.ai/en/advisory/cve-2021-32513
QSAN Storage Manager - Command Injection Following via QsanTorture function | ZUSO Generation
ZUSO Generation CVE Vulnerability Reporting Platform. We provide system vulnerability risk assessments, affected version details, and remediation guides. ZUSO...
storage managercommand injectionfollowingviafunction
https://advisories.gitlab.com/pypi/bentoml/CVE-2026-33744/
BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml | GitLab Advisory...
CVE-2026-33744 BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml: The docker.system_packages field in bentofile.yaml accepts...
command injectiondockerfileviasystempackages
https://kb.netgear.com/de/000064101/Sicherheitsempfehlung-f%C3%BCr-Command-Injection-nach-der-Authentifizierung-bei-einigen-WiFi-Systemen-PSV-2020-0087
Sicherheitsempfehlung für Command Injection nach der Authentifizierung bei einigen WiFi-Systemen,...
Zugeordnete CVE-IDs: keine. Erstveröffentlichung: 20-21-09-26 NETGEAR hat Fehlerbehebungen für eine Sicherheitslücke durch Befehlszeilenmanipulation nach...
command injectionnachderauthentifizierungbei
https://kev.5sn.com/2025/CVE-2025-59689
CVE-2025-59689 — Libraesva Email Security Gateway Command Injection Vulnerability
Libraesva ESG — Nation-State Exploited Command Injection via Compressed Email Attachment
email securitycommand injectioncvegatewayvulnerability
https://advisories.gitlab.com/pypi/embedchain/CVE-2024-23731/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | GitLab...
CVE-2024-23731 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'): The OpenAPI loader in Embedchain before 0.1.57...
of specialin ancommand injectionimproperneutralization
https://devhub.checkmarx.com/cve-details/cve-2008-0137/
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') -...
PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in...
of specialin ancommand injectionimproperneutralization
https://devhub.checkmarx.com/cve-details/cve-2012-0868/
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') -...
Jan 9, 2023 - CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows user-assisted...
of specialin ancommand injectionimproperneutralization
https://o3.security/vulnerability/CVE-2026-81476
CVE-2026-81476: Command Injection (High 8.1)
Oct 1, 2026 - CVE-2026-81476 is a high-severity vulnerability (CVSS 8.1). It affects Openmanage Server Administrator. See affected versions, exploit status, EPSS, and fix…
command injectioncvehigh
https://devhub.checkmarx.com/cve-details/cve-2024-8807/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') -...
of specialin ancommand injectionimproperneutralization
Sponsored https://www.xlovecam.com/prm03/textlink?id_affilie=26457&p=online&tri=10
Best Live Sex Cam Shows with Free Live Chat | XLoveCam
Watch thousands of cam girls get naked on XLoveCam.
https://mallen.com.au/blog/cve-2024-54012-cve-2024-54013-hanwhavision-camera-command-injection-cvss-8-5-patch-released-april-2026/
CVE-2024-54012 / CVE-2024-54013 — HanwhaVision Camera Command Injection (CVSS 8.5), Patch Released...
Jul 27, 2026 - A high-severity vulnerability affecting HanwhaVision camera systems has been published to the National Vulnerability Database and the GitHub Advisory Database....
command injectioncvecameracvsspatch
https://kitploit.com/es/tools/github/afang5472/tp-link-wdr-router-command-injection_poc
TP-Link-WDR-Router-Command-injection_POC — CVE-2019-6487. Una vulnerabilidad de inyección de...
CVE-2019-6487. Una vulnerabilidad de inyección de comandos en la serie TP-Link WDR5620 hasta la versión 3.
tp linkcommand injectionwdrrouterpoc
https://lists.archlinux.org/archives/list/arch-security@lists.archlinux.org/message/4BKKF3WM6OWEHSCJV3ZIYVFKJHNPOPRU/
[arch-security] [ASA-201603-19] dropbear: command injection - Arch-security - lists.archlinux.org
command injectionarchsecurityasadropbear
https://advisories.gitlab.com/npm/priest-runner/GMS-2020-440/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | GitLab...
GMS-2020-440 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'): Improper Neutralization of Special Elements used in an...
of specialin ancommand injectionimproperneutralization
https://www.otpulse.io/feed/cve-2026-0261
PAN-OS: Authenticated Admin Command Injection Vulnerability | CVSS 8.6 - OTPulse
An authenticated administrator with access to the PAN-OS command line or web interface could run arbitrary commands as root on the firewall, potentially allo...
command injectionpanauthenticatedadminvulnerability
https://www.safevibe.io/en/learn/fix-command-injection-in-spring-boot
How to Fix Command Injection in Spring Boot | SafeVibe
Learn how to prevent and fix Command Injection vulnerabilities in Spring Boot applications. Step-by-step guide with code examples, security checklists, and...
how tocommand injectionspring bootfix
https://www.invicti.com/web-application-vulnerabilities/modx-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-cve-2014-2311
MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL comman... MODX Improper...
of specialin ancommand injectionmodximproper
https://advisories.gitlab.com/nuget/microsoft.windowsdesktop.app.runtime.win-x86/CVE-2023-33127/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | GitLab...
CVE-2023-33127 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'): .NET and Visual Studio Elevation of Privilege...
of specialin ancommand injectionimproperneutralization
https://openwall.com/lists/oss-security/2026/09/29/25
oss-security - CVE-2026-82804: Apache DolphinScheduler: Command Injection in the Alert Script Plugin
apache dolphinschedulercommand injectionosssecuritycve
https://wasteland.me/intel/CVE-2026-86167
CVE-2026-86167: Command Injection in Tenda HG10 Boa Web Interface — Wasteland
A publicly disclosed OS command injection flaw in the Tenda HG10 gateway's Boa web server lets a low-privileged remote attacker execute arbitrary commands,...
command injectionweb interfacecvetendaboa
https://threatnote.com/wire/cve-2026-5509-arbitrary-command-injection-via-browser-developer-console-in-tp-link-archer-be450-and-be7200/
CVE-2026-5509 - Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450...
May 27, 2026 - CVE ID :CVE-2026-5509
command injectiondeveloper consoletp linkcvearbitrary
https://knowledge.catonetworks.com/docs/cve-2025-14213-socket-webui-os-command-injection
CVE-2025-14213 Socket WebUI: OS Command Injection
command injectioncvesocketwebui
https://devhub.checkmarx.com/cve-details/cve-2008-6596/
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') -...
SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the...
of specialin ancommand injectionimproperneutralization
https://cyfar.ca/posts/oh-look-the-foot-gun-went-off-again-citrix-netscaler-preauth-command-injection-cve-2026-88771
Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) ·...
Sep 28, 2026 - Pre-auth command injection in Citrix NetScaler ADC/Gateway default configuration, exploited as zero-day, allows unauthenticated root command execution via log...
the footwent offcommand injectionlookgun
https://www.sentinelone.com/vulnerability-database/cve-2026-24905/
CVE-2026-24905: Inspektor Gadget Command Injection RCE
Jan 29, 2026 - CVE-2026-24905 is a command injection RCE vulnerability in Inspektor Gadget. Learn about its impact, affected versions, and mitigation methods.
command injectioncveinspektorgadgetrce
https://portal.vyprsec.ai/stories/ibm-datastage-twelve-high-critical-cves-disclosed-including-critical-command-inj
IBM DataStage: Twelve High/Critical CVEs Disclosed, Including Critical Command Injection · VYPR
Sep 24, 2026 - Key findings • Twelve high and critical vulnerabilities disclosed for IBM DataStage on Cloud Pak for Data 5.4.0.0 between Sep 22-23, 2026. • Multiple flaws...
ibm datastagecommand injectiontwelvehighcritical
Sponsored https://www.sexyfans.app/enter.php?prg=1&id=robuta&t=best&ad_id=sexyfans_300x250_r.jpg
Sexyfans.app - Only Fans of Dating Apps
The only dating app for fans to meet up with local content creators.
https://www.resecurity.com/fr/blog/article/cve-2026-16812-critical-command-injection-in-arista-velocloud-orchestrator
Resecurity | CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator
command injectioncvecriticalaristaorchestrator
https://www.openwall.com/lists/oss-security/2013/07/26/5
oss-security - CVE-2013-1436: xmonad-contrib remote command injection
command injectionosssecuritycvexmonad
https://security.paloaltonetworks.com/CVE-2026-0309
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
Sep 9, 2026 - Palo Alto Networks Security Advisory: CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration A command injection...
command injectioncvepanauthenticatedcli
https://www.nccgroup.com/research/puckungfu-a-netgear-wan-command-injection/
Puckungfu: A NETGEAR WAN Command Injection | NCC Group
command injectionncc groupnetgearwan
https://www.dlink.com/de/de/support/support-news/2023/november/23/g416-lan-side-unathenticated-command-injection
G416 LAN-Side Unathenticated Command Injection | D-Link Deutschland
command injectionlanside
https://www.picussecurity.com/resource/blog/cve-2024-3400-palo-alto-pan-os-command-injection-vulnerability-explained
CVE-2024-3400: Palo Alto PAN-OS Command Injection Vulnerability Explained
In this blog, we explained the Palo Alto PAN-OS CVE-2024-3400 vulnerability in detail.
palo altocommand injectioncvepanvulnerability
https://censys.com/advisory/cve-2024-51567/
November 8 Advisory: CyberPanel Command Injection Vulnerabilities [CVE-2024-51567, CVE-2024-51568]...
Feb 23, 2026 - Date of Disclosure: October 29, 2024 Date added to CISA KEV: November 7, 2024 (CVE-2024-51567) Last week, we reported on CVE-2024-51378, a critical...
command injectionnovemberadvisorycyberpanelvulnerabilities
https://casky.ai/cve/CVE-2026-82794
CVE-2026-82794: OS Command Injection in SolarView Compact Schedule Settings — Casky — Casky
Casky's Claude AI skills cover the attack patterns behind CVE-2026-82794 (CVSS 8.8). See which skills detect this vulnerability.
command injectioncvecompactschedulesettings
https://kb.netgear.com/000059473/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Gateways-and-Routers-PSV-2017-2248
Security Advisory for Post-Authentication Command Injection on Some Gateways and Routers,...
NETGEAR has released fixes for a post-authentication command injection security vulnerability on the following product models: D7800, running firmware versions...
security advisorycommand injectionpostauthenticationgateways
https://www.sentinelone.com/vulnerability-database/cve-2026-86149/
CVE-2026-86149: Tenda CP3 OS Command Injection Vulnerability
Sep 8, 2026 - CVE-2026-86149 is an OS command injection vulnerability in Tenda CP3 firmware. Learn about its impact, affected versions, and mitigation methods.
command injectioncvetendavulnerability
https://www.hydrogen18.com/blog/rsva11001-remote-injection.html
Remote Command Injection Vulnerability in Rosewill RSVA11001
Finding vulnerabilities in embedded devices
command injectionremotevulnerabilityrosewill
https://security.snyk.io/vuln/SNYK-JS-JISON-570539
Command Injection in jison | CVE-2020-8178 | Snyk
Medium severity (5.3) Command Injection in jison | CVE-2020-8178
command injectionjisoncvesnyk
https://www.ionix.io/threat-center/cve-2026-86102/
CVE-2026-86102 – OS Command Injection – WatchGuard AP 1.0–3.4.7 - IONIX
CVE-2026-86102 is a critical OS command injection vulnerability in the internal management API service of WatchGuard AP wireless access points. An attacker...
command injectioncvewatchguard
https://cyberhappenings.com/happenings/2025/10/15/ictbroadcast-actively-exploited-unauthenticated-command-injection-flaw-cve-2025-2611/
ICTBroadcast actively exploited unauthenticated command-injection flaw (CVE-2025-2611) •...
Researchers confirmed active exploitation of CVE-2025-2611 in ICTBroadcast, exposing vulnerable servers to unauthenticated remote code execution. The flaw...
command injectionactivelyexploitedunauthenticatedflaw
Sponsored https://www.fling.com/enter.php?prg=1&id=robuta&t=best&ad_id=fl_315x300_12.jpg
Fling OFFICIAL | Biggest Dating Site For The Curious! FREE registration
Looking for real connections? Fling matches verified singles in a safe, inclusive community. Find your perfect match with full support.
https://advisories.gitlab.com/composer/phpxmlrpc/phpxmlrpc/GMS-2023-18/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | GitLab...
GMS-2023-18 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'): Improper Neutralization of Special Elements used in an...
of specialin ancommand injectionimproperneutralization
https://cve.imfht.com/detail/CVE-2026-57499
CVE-2026-57499: Liman: OS Command Injection in LogRotationController allows authenticated admin to...
Aug 28, 2026 - [CRITICAL 9.1] Overview Liman open-source server management software contains an operating system command injection vulnerability in the log rotation...
command injectioncvelimanallowsauthenticated
https://flatt.tech/cve/CVE-2024-3566
CVE-2024-3566 | Command injection vulnerability in programing languages on Windows | GMO Flatt...
command injectioncvevulnerabilityprograminglanguages
https://cvefeed.io/vuln/detail/CVE-2026-101008
CVE-2026-101008 - aaPanel BaoTa File Merge files.py merge_split_file command injection
Sep 28, 2026 - A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file of the file /www/server/panel/class/files.py of the...
command injectioncvebaotafilemerge
https://advisories.gitlab.com/npm/gry/CVE-2020-36650/
Improper Neutralization of Special Elements used in a Command ('Command Injection') | GitLab...
CVE-2020-36650 Improper Neutralization of Special Elements used in a Command ('Command Injection'): A vulnerability, which was classified as critical, was...
of specialcommand injectionimproperneutralizationelements
https://0daynews.com/cve/cve-2026-90699/
CVE-2026-90699 — D-Link DWR-M920 command injection via SIM PIN management endpoint — 0dayNews
D-Link DWR-M920 firmware 1.1.7 passes the newPin argument from /boafrm/formPinManageSetup directly to the system shell, allowing OS command injection. CVSS…
command injectioncvedwrviasim
https://portal.vyprsec.ai/stories/netcore-nbr200v2-nbr100v2-three-critical-command-injection-and-auth-bypass-flaws
Netcore NBR200V2/NBR100V2: Three Critical Command Injection and Auth Bypass Flaws Disclosed...
Sep 28, 2026 - Key findings • Three critical vulnerabilities disclosed on September 28, 2026, affecting Netcore NBR200V2 and NBR100V2 devices. • All three vulnerabilities...
command injectionnetcorethreecriticalauth
https://helpcenter.trendlife.com/en-us/article/TMKA-20701
OS Command Injection attack on D-Link DIR-645 router | Trend Micro Help Center
Know what to fix when an OS Command Injection attack on D-Link DIR-645 router is detected from your home network.
command injectiontrend microhelp centerattackdir
https://www.invicti.com/web-application-vulnerabilities/opencart-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-cve-2020-20491
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via the Fba plugin function... Opencart...
of specialin ancommand injectionopencartimproper
https://5ad.net/government-mandate-issued-as-command-injection-in-vmware-aria-operations-reaches-cisas-known-exploited-vulnerabilities-list/
Government Mandate Issued as Command Injection in VMware Aria Operations Reaches CISA's Known...
Mar 4, 2026 - Government Mandate Issued as Command Injection in VMware Aria Operations Reaches CISA's Known Exploited Vulnerabilities List
command injectiongovernmentmandateissuedvmware
https://www.sentinelone.com/vulnerability-database/cve-2026-40527/
CVE-2026-40527: radare2 Command Injection Vulnerability
Apr 20, 2026 - CVE-2026-40527 is a command injection vulnerability in radare2. Learn about its impact, affected versions, and mitigation methods.
command injectioncvevulnerability
https://cybertop.ai/t/cve-2025-54948-trend-micro-apex-one-os-command-injection-vulnerability
CVE-2025-54948: Trend Micro Apex One OS Command Injection Vulnerability — actively exploited —...
CVE-2025-54948: A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious...
trend microcommand injectioncveapexone
https://cert.kenet.or.ke/cve-2025-61887-apache-http-server-command-injection?gvas=lime_green
CVE-2025-61887 - Apache HTTP Server Command Injection | Kenya Education Network
apache http serverkenya education networkcommand injectioncve
https://cybersecurity-news.de/cve-2026-73172-advantech-eki-1242eims-command-injection/
CVE-2026-73172: Kritische Root-Command-Injection in Advantech EKI-1242EIMS
Sep 18, 2026 - CVE-2026-73172 betrifft Advantech EKI-1242EIMS V1.06.01: Remote-Angriffe ohne Anmeldung ermöglichen OS-Befehle als root.
command injectioncvekritischerootadvantech
https://lists.rpm.org/pipermail/rpm-maint/2026-September/036797.html
[Rpm-maint] [rpm-software-management/rpm] Prevent command injection via rpmbuild -t (PR #4317)
software managementcommand injectionrpmmaintprevent
https://advisories.gitlab.com/nuget/microsoft.netcore.app.runtime.win-x86/CVE-2023-36792/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | GitLab...
CVE-2023-36792 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'): Visual Studio Remote Code Execution Vulnerability
of specialin ancommand injectionimproperneutralization
https://devhub.checkmarx.com/cve-details/cve-2008-6794/
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') -...
SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat...
of specialin ancommand injectionimproperneutralization
https://zerovault.io/cve/CVE-2026-82791
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue...
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB C...
of specialin ancommand injectionimproperneutralization
https://threat-intelligence.redeyesecurity.com/blog/ubiquiti-unifi-critical-flaws-2026
Ubiquiti Patches Seven Critical UniFi Flaws, Including a Perfect 10.0 Command Injection | RedEye...
Jul 10, 2026 - Ubiquiti shipped fixes for seven critical vulnerabilities spanning UniFi Connect, Talk, Access, Protect, and UniFi OS, topped by a CVSS 10.0 command injection....
command injectionubiquitipatchessevencritical
https://retaliatornation.io/vulnerabilities/cve-2024-6047
CVE-2024-6047: GeoVision Devices OS Command Injection | CRS
Multiple GeoVision devices contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to inject and execute arbitrary system…
command injectioncvedevicescrs
https://www.sentinelone.com/vulnerability-database/cve-2025-67511/
CVE-2025-67511: Cybersecurity AI Command Injection RCE Flaw
Mar 17, 2026 - CVE-2025-67511 is a command injection RCE vulnerability in Cybersecurity AI framework. Learn about its impact, affected versions, and mitigation methods.
command injectioncvecybersecurityrceflaw
https://lists.busybox.net/pipermail/busybox-cvs/2018-September/038373.html
[Bug 11281] FW: [FG-VD-18-127] Busybox Command Injection Vulnerability Notification
command injectionbugbusyboxvulnerabilitynotification
https://advisories.gitlab.com/cargo/aliyundrive-webdav/CVE-2024-29640/
aliyundrive-webdav vulnerable to Command Injection | GitLab Advisory Database (GLAD)
CVE-2024-29640 aliyundrive-webdav vulnerable to Command Injection: An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute...
command injectionwebdavvulnerablegitlabadvisory
https://cyberthreatintelligence.net/cve/CVE-2025-58034
CVE-2025-58034 — Fortinet FortiWeb OS Command Injection Vulnerability | Cyber Threat Intelligence
Oct 7, 2026 - CVE-2025-58034 — Fortinet FortiWeb OS Command Injection Vulnerability. Affects Fortinet FortiWeb. Rated HIGH (CVSS 7.2). Listed in the CISA Known Exploited...
cyber threat intelligencecommand injectioncvefortinetvulnerability
https://kitploit.com/de/tools/github/tiemio/rce-poc-cve-2021-25646
RCE-PoC-CVE-2021-25646 — Ein Proof-of-Concept für die CVE-2021-25646, die eine Command Injection...
Ein Proof-of-Concept für die CVE-2021-25646, die eine Command Injection ermöglicht
proof of conceptcommand injectionrcepoccve
https://casky.ai/cve/CVE-2026-76561
CVE-2026-76561: Dogtag PKI Certificate Profile Import Command Injection — Casky — Casky
Casky's Claude AI skills cover the attack patterns behind CVE-2026-76561 (CVSS 7.2). See which skills detect this vulnerability.
command injectioncvedogtagpkicertificate
https://www.endorlabs.com/vulnerability/cve-2026-72862
Endor Patches | CVE-2026-72862, Dokploy: OS Command Injection via dockerImage field in database...
Severity, affected versions and fix guidance from Endor Labs for CVE-2026-72862: Dokploy: OS Command Injection via dockerImage field in database service...
command injectionendorpatchescvevia
https://backpackforlaravel.com/articles/news/security-advisory-in-backpack-crud-unauthenticated-command-injection
Security Advisory in Backpack\CRUD - Unauthenticated Command Injection :: Backpack for Laravel
On May 16th 2026 we received a responsible disclosure report from security researcher Vishal Shukla (@therawdev) identifying an obscure...
security advisorycommand injectionbackpackcrudunauthenticated
https://devhub.checkmarx.com/cve-details/cve-2023-26129/
Improper Neutralization of Special Elements used in a Command ('Command Injection') -...
of specialcommand injectionimproperneutralizationelements
https://blog.toolslib.net/2026/10/03/cve-2026-73570-zimbra-vulnerability/
CVE-2026-73570: Unauthenticated command injection puts internet-facing Zimbra servers at risk -...
Oct 2, 2026 - Microsoft reports exploitation of CVE-2026-73570 in internet-facing Zimbra servers. Learn which configurations are affected and what administrators should...
command injectionat riskcveunauthenticatedputs
https://devhub.checkmarx.com/cve-details/cve-2022-23666/
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') -...
May 9, 2023 - A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below,...
of specialin ancommand injectionimproperneutralization
https://thetechuniqueacademy.com/courses/complete-advanced-cyber-security-training/lesson/64-server-hacking-pentesting-os-command-injection-exploiting-vnc-and-rpcbind-root-login/
64. Server Hacking Pentesting (Os-Command Injection)- Exploiting Vnc And Rpcbind (Root Login) -...
command injectionserverhackingpentestingexploiting
Sponsored https://www.camsoda.com/?id=robuta&ad_id=cs_300x250_2grls_300k.gif
Free Live Sex Cams, Cam Girls, Adult Chat, and Pornstar Cams | Camsoda
Join Camsoda for the hottest live cam girls! Free HD webcam shows, private sessions, and real-time chat with sexy models. Watch live now and enjoy!
https://thehackernews.com/2024/09/zyxel-patches-critical-os-command.html?m=0
Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers
Zyxel releases patches for critical vulnerabilities in routers, including OS command injection flaw CVE-2024-7261.
command injectionaccess pointszyxelpatchescritical
https://www.netvigilance.com/kev/cve-2018-9276/
CVE-2018-9276 — Paessler PRTG Network Monitor OS Command Injection — netVigilance
Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the...
prtg network monitorcommand injectioncve
https://recentbreaches.com/vulnerability/CVE-2023-1389
CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerability (CVSS 8.8) | Recent Breaches
CVE-2023-1389 affects TP-Link · Archer AX21. Exploited in the wild (CISA KEV). TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219...
tp linkcommand injectioncvearchervulnerability
https://codeant.ai/vulnerability-database/cve-2026-53804
OS Command Injection (CWE-78) in OTRS PGP Encryptor
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute...
command injectioncweotrspgpencryptor
https://kb.netgear.com/000065031/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-and-WiFi-Systems-PSV-2020-0446
Security Advisory for Post-Authentication Command Injection on Some Routers and WiFi Systems,...
Associated CVE IDs: None First published: 6/29/2022 NETGEAR has released fixes for a post-authentication command injection security vulnerability on the...
security advisorycommand injectionpostauthenticationrouters
https://flatt.tech/cve/CVE-2024-24576
CVE-2024-24576 | Command injection in Rust on Windows | GMO Flatt Security
command injectioncverustwindowsgmo
https://security.julialang.org/advisories/JLSEC-2026-1060/
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG......
command injectionimagemagickcontainsvulnerabilitysvg
https://bugzilla.redhat.com/show_bug.cgi?id=1816272
1816272 – CVE-2020-8130 rubygem-rake: rake: OS Command Injection via egrep in Rake::FileList...
command injectioncverubygemrakevia
https://courses.stationx.net/courses/learn-bug-bounty-hunting-web-security-testing-from-scratch/lectures/45048436
Discovering Blind Command Injection Vulnerabilities | StationX - Cyber
Learn how to discover bugs / vulnerabilities like experts | OWASP top 10 + more
command injectiondiscoveringblindvulnerabilitiescyber
Sponsored https://www.licktolike.com/enter.php?prg=1&id=robuta&t=best&ad_id=licktolike_315x300_ils1.gif
Licktolike
If you are a single or a couple looking for casual sex, LicktoLike is for you. LicktoLike offers a quick and easy signup process, so you can start browsing nude pics and chatting with other adults in minutes.
https://codeant.ai/vulnerability-database/cve-2026-85222
OS Command Injection (CWE-78) in D-Link DNS-340L CGI
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of...
command injectioncwednscgi
https://securityintelhub.com/article/cisa-kev-cve-2026-83549-sonicwall-sma1000-appliances
CISA KEV: SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances OS Command Injection...
Sep 2, 2026 - SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute...
command injectioncisakevsonicwallappliances