#cwe-77

共收录 708 条相关情报。

漏洞预警2026-06-07 发布MEDIUM

A security vulnerability has been detected in GL.iNet GL-MT3000 4.4.5. The impacted element is the function rpc_sys of the file /cgi-bin/luci/rpc of the component LuCI JSON-RPC ...

CVE-2026-11449

GL.iNet GL-MT3000路由器固件版本4.4.5中存在一个命令注入漏洞（CVE-2026-11449），位于LuCI JSON-RPC接口的/cgi-bin/luci/rpc文件中的rpc_sys函数。攻击者可以远程利用该漏洞，通

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-06-07 发布MEDIUM

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulat...

CVE-2026-11448

GL.iNet GL-MT3000 路由器（固件版本 ≤ 4.4.5）的 Minidlna 服务中存在一处命令注入漏洞。漏洞位于 /rpc 文件的 realpath 函数中，通过操控参数 kube.set，攻击者可在无需身份验证（但 CVS

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-06-07 发布MEDIUM

A security flaw has been discovered in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function iwinfo_backend of the file iwinfo.so of the component MTK Backend. The manipulatio...

CVE-2026-11447

该漏洞存在于GL.iNet GL-MT3000路由器（固件版本4.4.5及之前）的MTK后端组件中，具体位于iwinfo.so文件的iwinfo_backend函数。攻击者可通过操控该函数的device参数实现命令注入，从而在设备上执行任意

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

安全公告2026-06-06 发布INFO

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some...

CVE-2026-11408

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:low

漏洞预警2026-06-06 发布INFO

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the file app/model/LogMod.js of the component Log Viewer Endp...

CVE-2026-11408

A vulnerability was identified in vertex-app vertex up to 2026.02.12. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-06 发布INFO

A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpnclient.sh of the component OpenVPN Client Import Workflow. ...

CVE-2026-11406

A vulnerability was determined in GL.iNet MT3000 up to 4.4.5. This vulnerability affects unknown code of the file ovpncl

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

安全公告2026-06-05 发布INFO

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function...

CVE-2026-11341

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boaf

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:low

漏洞预警2026-06-05 发布INFO

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_...

CVE-2026-11341

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boaf

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-05 发布INFO

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument...

CVE-2026-11339

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

安全公告2026-06-05 发布INFO

Authenticated Remote Code Execution via loadReader functionName code injection in DbGate

CVE-2026-47670

### Summary DbGate is vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials c

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-77 #cwe-78 #severity:critical

漏洞预警2026-06-05 发布INFO

A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/formSmsManage. Performing a manipulation of the argument a...

CVE-2026-10878

A vulnerability was detected in D-Link DWR-M920 1.1.50/1.1.70. Affected is the function sub_41C8E8 of the file /boafrm/f

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-06-04 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.

CVE-2026-45497

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an autho

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-06-04 发布INFO

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-42824

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-06-04 发布INFO

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lea...

CVE-2026-10873

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-04 发布INFO

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation res...

CVE-2026-10872

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-04 发布INFO

A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulati...

CVE-2026-10871

A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-06-04 发布INFO

A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injecti...

CVE-2026-10870

A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the comp

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-06-03 发布INFO

launch-editor vulnerable to command injection via the crafted request on Windows

CVE-2024-52011

### Summary Due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-77 #severity:high

漏洞预警2026-06-02 发布INFO

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This man...

CVE-2026-10550

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-06-01 发布INFO

A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the file src/wezterm_executor.ts of the component switch_pane...

CVE-2026-10279

A vulnerability was identified in hiraishikentaro wezterm-mcp 0.1.0. The affected element is an unknown function of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78