共收录 708 条相关情报。
← 返回所有主题CVE-2026-38714
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a co
CVE-2024-24909
Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the ga
CVE-2025-56814
A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code
CVE-2026-12223
A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd
CVE-2026-12219
A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellBy
CVE-2026-12197
A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file
CVE-2026-12187
A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknow
CVE-2026-12186
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replace_country in the library
CVE-2026-54090
> [!NOTE] > **This feature has been disabled by default for all installations from v2.33.8 onwards, including for existe
CVE-2026-42850
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject commands within the
CVE-2026-47242
### Summary Two `Net::IMAP` commands, `#id` and `#enable`, do not validate their arguments. Arguments to either comman
CVE-2026-47240
Several Net::IMAP commands accept a "raw data" argument that is sent verbatim after validation to prevent command inject
CVE-2026-9277
### Summary `shell-quote`'s `quote()` function did not validate object-token inputs against the operator model used by
CVE-2026-11572
Versions of the package degit before 2.8.6, from 3.0.0 and before 3.3.1 are vulnerable to Command Injection due to impro
CVE-2026-11556
A security flaw has been discovered in Tenda F451 1.0.0.7/1.0.0.9. Impacted is the function formWriteFacMac of the file
CVE-2026-11487
A flaw has been found in Neovim up to 0.12.2. Affected by this issue is the function M.read of the file runtime/lua/vim/
CVE-2026-11455
A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. Affected by this issue is the function check_cmd
CVE-2026-11452
GL.iNet GL-MT3000路由器固件版本4.4.5及之前存在命令注入漏洞。漏洞位于/cgi-bin/glc文件的SET_USER_PWD处理器函数FUN_0042e200中，攻击者可通过远程发送特制的Password参数，实现命令注
CVE-2026-11451
CVE-2026-11451 是 GL.iNet GL-MT3000 路由器固件 4.4.5 中的一个远程命令注入漏洞。漏洞存在于 /cgi-bin/glc 文件的 FTP 协议处理器组件中，具体位于 snprintf 函数。攻击者可以通过
CVE-2026-11450
CVE-2026-11450 是影响 GL.iNet GL-MT3000 路由器（固件版本 4.4.5）的一个命令注入漏洞。漏洞位于 /usr/lib/oui-httpd/rpc/ 库的 dlopen 函数中，属于路径规范化处理组件。攻击者