#cwe-78

共收录 1612 条相关情报。

← 返回所有主题

漏洞预警2026-10-01 发布INFO

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely

CVE-2026-76146

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-30 发布INFO

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.

CVE-2026-51870

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-30 发布INFO

A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run o...

CVE-2026-102120

A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-269

漏洞预警2026-09-30 发布INFO

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected a...

CVE-2026-102114

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbi

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-30 发布INFO

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to ...

CVE-2026-102112

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-269

漏洞预警2026-09-30 发布INFO

Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to upload a configuration package whose contents were not su...

CVE-2026-102096

Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-30 发布CRITICAL

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP tool. Executing a ma...

CVE-2026-102911

该漏洞编号 CVE-2026-102911，影响 zosmaai 开源项目 pi-llm-wiki 0.11.7 及更早版本。问题位于 mcp/index.ts 中 wiki_capture_source 这一 MCP（Model Cont

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-09-30 发布INFO

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux sys

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:medium

安全公告2026-09-30 发布INFO

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

漏洞预警2026-09-30 发布INFO

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function child_process.exec of the file src/g...

CVE-2026-102906

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-30 发布INFO

A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local_server/main.py of the component Execute Endpoint. The ma...

CVE-2026-102874

A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the function subprocess.run of the file anytool/local

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-30 发布INFO

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute a...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux sys

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-30 发布INFO

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating u...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStr

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns prompt text unchanged before activate.bat inserts it int...

CVE-2026-102937

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote() returns

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-29 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash and zsh) and activate.fish scripts place values already es...

CVE-2026-102925

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate (bash a

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-29 发布INFO

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backen...

CVE-2026-100292

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated req

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-29 发布INFO

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser p...

CVE-2026-102829

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operat

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-184

漏洞预警2026-09-29 发布INFO

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. From 3.15.0 until 4.0.1, the defaul...

CVE-2026-102828

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operat

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-184

漏洞预警2026-09-29 发布INFO

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUn...

CVE-2026-102826

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operat

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-29 发布INFO

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text ...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An au

历史摘要 · 未重新核验 · NVD

#cve #cwe-78