#cwe-77

共收录 691 条相关情报。

漏洞预警2026-07-22 发布INFO

A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Popen of the file minicode/config.py of the component Proje...

CVE-2026-16488

A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-07-21 发布INFO

jsforce SFDX Connection Registry sfdx.js _execCommand os command injection

CVE-2026-16489

A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-77 #cwe-78

安全公告2026-07-21 发布INFO

QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection

CVE-2026-16488

A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-77 #cwe-78

漏洞预警2026-07-21 发布INFO

MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the `log_file_name` parameter in the `stata_do` API and CLI is directly inter...

CVE-2026-47708

MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the `log_file_name`

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-07-21 发布INFO

MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vuln...

CVE-2026-47690

MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-1336

安全公告2026-07-21 发布INFO

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

CVE-2026-47708

MCP-for-Stata is an MCP server for Stata to integrate Stata into an agent. Prior to version 1.17.3, the `log_file_name`

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-77

安全公告2026-07-21 发布INFO

MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow

CVE-2026-47690

MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1336 #cwe-77

漏洞预警2026-07-21 发布INFO

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343...

CVE-2026-16448

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-32

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-07-18 发布HIGH

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the command-line export command. An authenticated System Use...

CVE-2025-71392

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the

来源摘录 · NVD

#cve #cwe-77

漏洞预警2026-07-15 发布INFO

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration...

CVE-2026-30623

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-07-15 发布INFO

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

CVE-2025-65720

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

安全公告2026-07-15 发布INFO

LangBot: Authenticated RCE Via MCP Configuration

CVE-2026-54449

### Summary Any authenticated user can achieve arbitrary command execution on the LangBot servers through changing the M

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-77 #severity:high

漏洞预警2026-07-15 发布INFO

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths from tabby-electron/src/pathDrop.ts into the active shel...

CVE-2026-46709

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-07-15 发布INFO

Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)

CVE-2026-46709

Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby inserts dropped file paths

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-77 #cwe-78

漏洞预警2026-07-14 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.

CVE-2026-56197

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an au

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-07-14 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-50488

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service al

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-07-14 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

CVE-2026-58635

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows a

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-07-14 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.

CVE-2026-50520

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unau

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-07-14 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute code over a network.

CVE-2026-48561

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-07-13 发布INFO

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection.

CVE-2026-22103

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection.

历史摘要 · 未重新核验 · NVD

#cve #cwe-77