A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results ...

CVE-2026-75984

A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admi

历史摘要 · 未重新核验 · NVD

LibreNMS Vulnerable to Remote Code Execution via AboutController

# Remote Code Execution via AboutController in LibreNMS ## Summary A Remote Code Execution (RCE) vulnerability exists

历史摘要 · 未重新核验 · GitHub Advisory

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), and SMTP.expn() send caller-supplied addresses without rej...

CVE-2026-53533

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), a

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-24301

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut

历史摘要 · 未重新核验 · NVD

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&section=ptest_ssid of the component CGI Interf...

CVE-2026-75094

A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_44B438 of the file /cgi-bin/mbox-config?

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/g...

CVE-2026-19983

CVE-2026-19983 是影响 GL.iNet 多款路由器型号（A1300、AX1800、AXT1800、MT2500、MT3000、MT6000、X3000、XE3000）在 4.8.x 版本中的操作系统命令注入漏洞。该漏洞位于 N

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation...

CVE-2026-19982

CVE-2026-19982 是影响 GL.iNet BE9300 和 MT6000 路由器（固件版本 4.8.x）的一个操作系统命令注入漏洞。漏洞位于防火墙管理 RPC 组件中，攻击者通过构造恶意 dest_port 或 dest_ip

历史摘要 · 未重新核验 · NVD

A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE30...

CVE-2026-19981

CVE-2026-19981 是影响 GL.iNet 多款路由器型号（包括 A1300、AX1800、AXT1800、BE1400、BE3600、BE6500、BE9300、BE10000、E5800、MT2500、MT3000、MT360

历史摘要 · 未重新核验 · NVD

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function child_process.exec of the file build/i...

CVE-2026-19978

CVE-2026-19978 是 jiantao88 android-mcp-server 中的一个 OS 命令注入漏洞。该服务器是一个基于 Android 的 MCP（Model Context Protocol）实现，用于与 Andro

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest_macaddress. ...

CVE-2026-19976

CVE-2026-19976 是 COMFAST CF-N1-S 路由器固件 2.6.0.1 中被披露的命令注入漏洞。漏洞位于 /cgi-bin/mbox-config 接口的函数 sub_44A968 中，通过 method=SET 且

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface ...

CVE-2026-19963

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /go

历史摘要 · 未重新核验 · NVD

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUs...

CVE-2026-19962

该漏洞影响Edimax EW-7478APC设备的1.04版本。漏洞位于/goform/setWAN处理函数中，攻击者通过构造特殊的pppUserName、pptpUserName或L2TPUserName参数，能够注入系统命令并执行。由于

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument ro...

CVE-2026-19960

CVE-2026-19960 是 Edimax EW-7478APC 无线接入点固件版本 1.04 中发现的一个命令注入安全漏洞。该漏洞影响设备 Web 管理接口中的 formWlbasic 函数，具体位于 /goform/formWlba

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in a command ('command injection') in Microsoft...

CVE-2026-50523

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an au

历史摘要 · 未重新核验 · GitHub Advisory

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

CVE-2026-50523

CVE-2026-50523 是微软 PowerShell 中存在的一个命令注入漏洞。该漏洞源于对命令中特殊元素（special elements）的中和不当（improper neutralization），属于典型的命令注入（comma

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such man...

CVE-2026-19771

A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /c

历史摘要 · 未重新核验 · NVD

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of th...

CVE-2026-19747

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to

历史摘要 · 未重新核验 · NVD

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$...

CVE-2026-73250

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-68792

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an author

历史摘要 · 未重新核验 · NVD

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-65656

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauth

历史摘要 · 未重新核验 · NVD