Cyber Security Daily Radar

#cwe-78

共收录 1612 条相关情报。

← 返回所有主题
漏洞预警2026-09-23 发布INFO

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafted backu...

CVE-2026-94367

OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in ...

CVE-2026-17102

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elemen...

CVE-2026-16469

IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection.

CVE-2026-16468

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
安全公告2026-09-22 发布INFO

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated...

CVE-2026-76714

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary co

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#cwe-78#severity:high
安全公告2026-09-22 发布INFO

Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

CVE-2026-76802

A vulnerability in Nuclei's DAST template loading path allows unsigned `code:` protocol templates to execute, bypassing

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#go#cwe-78#severity:medium
安全公告2026-09-22 发布INFO

KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API

CVE-2026-62371

## Impact The KubeEdge NodeUpgradeJob handler constructed the `keadm upgrade edge` command by concatenating the user-co

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#go#cwe-78#severity:high
漏洞预警2026-09-22 发布INFO

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could...

CVE-2026-76714

Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary co

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-loader.ts o...

CVE-2026-95660

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function o

历史摘要 · 未重新核验 · NVD

#cve#cwe-77#cwe-78
漏洞预警2026-09-22 发布INFO

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WM_MACRODLGRUNMACRO, the Run a Macr...

CVE-2026-85288

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HM

历史摘要 · 未重新核验 · NVD

#cve#cwe-78#cwe-345#cwe-693
漏洞预警2026-09-22 发布INFO

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote attacker...

CVE-2026-43641

Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing m

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
安全公告2026-09-22 发布INFO

Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection

CVE-2026-95660

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function o

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-77#cwe-78
漏洞预警2026-09-22 发布INFO

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature...

CVE-2026-76802

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading b

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
安全公告2026-09-22 发布INFO

Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog

CVE-2026-85288

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HM

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-345#cwe-693#cwe-78
安全公告2026-09-22 发布INFO

Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass

CVE-2026-76802

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading b

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-78
漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerabili...

CVE-2026-80152

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerabili...

CVE-2026-80151

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerabili...

CVE-2026-80145

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerabili...

CVE-2026-80144

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve#cwe-78
漏洞预警2026-09-22 发布INFO

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerabili...

CVE-2026-80143

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB88

历史摘要 · 未重新核验 · NVD

#cve#cwe-78