#cwe-78

共收录 1612 条相关情报。

漏洞预警2026-11-01 发布CRITICAL

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os c...

CVE-2026-120197

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wap

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-77 #cwe-78 #severity:high

漏洞预警2026-11-01 发布CRITICAL

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in...

CVE-2026-120196

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/w

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-77 #cwe-78 #severity:high

漏洞预警2026-11-01 发布CRITICAL

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the com...

CVE-2026-120195

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the funct

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-77 #cwe-78 #severity:critical

漏洞预警2026-10-31 发布HIGH

Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator component of SoftIron HyperCloud allows an authenticated user with access...

CVE-2026-116755

Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator component of Sof

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-78 #severity:high

漏洞预警2026-10-30 发布CRITICAL

ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy script content and passes it to an unsandb...

CVE-2026-62853

ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-s

来源摘录 · NVD

#cve #cwe-78 #cwe-94

漏洞预警2026-10-30 发布HIGH

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior to 6.5, advanced/Scripts/utils.sh getFTLPID() attempts t...

CVE-2026-119335

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. Prior

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布CRITICAL

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are balanced so that nothing can escape ...

CVE-2026-116241

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the que

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-115 #cwe-78 #severity:critical

漏洞预警2026-10-30 发布HIGH

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/...

CVE-2026-119713

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Windows .cmd and .bat shims by prepending cmd /c, causing cm...

CVE-2026-119288

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Win

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated ...

CVE-2026-118238

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low ...

CVE-2026-91913

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup. restoreConfigBlob() feeds the database dum...

CVE-2026-118992

CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configur

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low ...

CVE-2026-111505

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high...

CVE-2026-101214

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high...

CVE-2026-101210

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布CRITICAL

A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker...

CVE-2025-31704

A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially craf

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpeg Image Toolkit allows OS Command Injection. This issue a...

CVE-2026-114523

Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Ffmpe

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-29 发布INFO

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the p...

CVE-2026-119282

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-78 #cwe-88

漏洞预警2026-10-29 发布HIGH

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires exi...

CVE-2026-115805

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local use

来源摘录 · NVD

#cve #cwe-78

安全公告2026-10-29 发布HIGH

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

CVE-2026-61438

### Summary JobWorkflowExecutor._exec_inline_python() is designed to safely execute inline Python expressions from YAML

来源摘录 · GitHub Advisory

#advisory #cwe-184 #cwe-693 #cwe-78 #pip #severity:high