#cwe-77

共收录 710 条相关情报。

漏洞预警2026-05-08 发布INFO

/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName...

CVE-2024-30167

/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary comm

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-05-08 发布MEDIUM

In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code e...

CVE-2023-47268

In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrar

来源摘录 · NVD

#cve #cwe-77

漏洞预警2026-05-08 发布INFO

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server b...

CVE-2026-42271

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before vers

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-08 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/...

CVE-2026-41501

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a comm

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-05-08 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/...

CVE-2026-41500

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a comm

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

安全公告2026-05-08 发布INFO

A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84....

CVE-2026-8112

A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affected is the function e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:low

安全公告2026-05-08 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Azure...

CVE-2026-35428

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unaut

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:critical

安全公告2026-05-08 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Copilot...

CVE-2026-33111

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) all

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:high

漏洞预警2026-05-07 发布INFO

A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affected is the function executeCognitivePulse of the file src/kernel.ts. Performin...

CVE-2026-8112

A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affected is the function e

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-07 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-35428

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unaut

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-05-07 发布INFO

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over...

CVE-2026-33111

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) all

历史摘要 · 未重新核验 · NVD

#cve #cwe-77

漏洞预警2026-05-05 发布HIGH

In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could cr...

CVE-2026-40068

CVE-2026-40068 影响 Claude Code 版本 2.1.63 至 2.1.83。该漏洞存在于文件夹信任判定逻辑中：当处理 git worktree 时，代码未对 `commondir` 文件内容进行验证，直接使用了该文件指

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-77

漏洞预警2026-05-05 发布INFO

A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the function sub_408F90 of the file /cgi/iux_set.cgi of the component ApplyRestore Endp...

CVE-2026-7833

A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the function sub_408F90 of the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-05-05 发布INFO

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the a...

CVE-2026-7823

A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Affected is the function setAppFilterCfg of

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-05-05 发布INFO

A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the function git_operation of the file src/code_mcp/server.p...

CVE-2026-7812

A vulnerability was found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. The impacted element is the

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

安全公告2026-05-05 发布INFO

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp...

CVE-2026-7785

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f2

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:medium

漏洞预警2026-05-05 发布INFO

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function qui...

CVE-2026-7785

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f2

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-05-04 发布INFO

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

CVE-2026-42257

### Summary Several `Net::IMAP` commands accept a raw string argument that is sent to the server without validation or e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rubygems #cwe-77 #cwe-93 #severity:medium

安全公告2026-05-04 发布INFO

net-imap vulnerable to command Injection via unvalidated Symbol inputs

CVE-2026-42258

### Summary Symbol arguments to commands are vulnerable to a CRLF Injection / IMAP Command injection via Symbol argumen

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #rubygems #cwe-77 #cwe-93 #severity:medium

漏洞预警2026-05-04 发布INFO

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_process.spawn of the file src/index.ts of the component MCP Interface. Executing ...

CVE-2026-7730

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_process.spawn of the fil

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78