A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The...
CVE-2026-115995
A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f
#cwe-77
共收录 691 条相关情报。
← 返回所有主题A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the compo...
CVE-2026-115995
A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command inj...
CVE-2026-115969
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the com
Improper neutralization of special elements used in a command ('command injection') in Azure...
CVE-2026-105014
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unautho
There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially craf...
CVE-2026-79882
There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code
A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker s...
CVE-2026-79878
A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauth
Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploi...
CVE-2026-79864
Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent
There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation ...
CVE-2026-79861
There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending
Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host i...
CVE-2026-79846
Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote at
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a m...
CVE-2026-114575
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModu
launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
CVE-2026-112942
### Summary `launch-editor` checked `fs.existsSync(fileName)` before passing a supplied path to an editor command. On W
A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The mani...
CVE-2026-113506
A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/mainfunction.cgi of th...
CVE-2026-113397
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function rueques
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argume...
CVE-2026-112942
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middle
A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction.cgi of the compone...
CVE-2026-113396
A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_t
A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload En...
CVE-2026-113391
A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the
A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Int...
CVE-2026-113390
A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of th
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the co...
CVE-2026-113389
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
CVE-2026-43850
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the syst
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The mani...
CVE-2026-113378
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src