A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the...
CVE-2026-86148
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the f
#cwe-77
共收录 691 条相关情报。
← 返回所有主题A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Managemen...
CVE-2026-86151
CVE-2026-86151 影响腾达（Tenda）CP3 固件版本 27.5.57.101。该漏洞源于设备网络配置管理组件（Apis/system.c）中的函数 sub_2F77E8 存在操作系统命令注入缺陷。远程攻击者在具备高权限（基于
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface...
CVE-2026-86149
根据 NVD 的元数据，Tenda CP3 固件版本 27.5.57.101 被报告存在于 Net/NetCheckPing.cpp 文件中的操作系统命令注入漏洞。攻击者可通过控制 interface_name 和 host 参数，向底层系
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulatio...
CVE-2026-86148
CVE-2026-86148 是 Tenda CP3 智能设备（固件版本 27.5.57.101）中存在的一处操作系统命令注入漏洞。根据 NVD 元数据，该漏洞位于组件 Kylin 的 Apis/system.c 文件中，涉及函数 Syst
laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during databa...
CVE-2026-53932
laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted back
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown...
CVE-2026-85223
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown...
CVE-2026-85224
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the component File Sharing. Executing a m...
CVE-2026-85224
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Perform...
CVE-2026-85223
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an...
CVE-2026-85222
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-...
CVE-2026-85222
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A hig...
CVE-2026-63694
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements use
A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval of the file /adminapi/system/crontab/save of the component...
CVE-2026-85040
A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is the function eval o
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize th...
CVE-2026-79754
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.
Nuclio: Kaniko build tempDir command injection
CVE-2026-79754
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.
Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Success...
CVE-2026-73766
Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with admini
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in rem...
CVE-2026-73763
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitr
Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injecti...
CVE-2026-73722
Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an
A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbit...
CVE-2026-73717
A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that co
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying...
CVE-2026-73709
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adja