Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
CVE-2026-92993
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of
#cwe-78
共收录 1612 条相关情报。
← 返回所有主题mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/fetch.c, libmport/...
CVE-2026-54575
mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used ra
@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npm_exe...
CVE-2026-71538
@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Win
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthen...
CVE-2026-90822
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command i
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab...
CVE-2026-81476
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Element
In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In...
CVE-2026-92580
In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In plugin/CloneSite/cloneClie
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system ...
CVE-2026-20350
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticat
A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. ...
CVE-2026-20283
A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbi
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote ...
CVE-2026-91102
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote ...
CVE-2026-91100
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a re...
CVE-2026-27565
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root pr
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing ex...
CVE-2026-27564
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a crafted GET request with admin credentials all...
CVE-2026-27563
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing...
CVE-2026-27562
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by send
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted GET request with admin credentials allowing...
CVE-2026-27561
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by send
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allow...
CVE-2026-27560
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by send
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing e...
CVE-2026-27559
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sendi
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files endpoint using operator cre...
CVE-2026-27558
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/attached_devices_tab/aj
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using operator credentials allowing execution...
CVE-2026-27554
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/save_iodd_paramete
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage endpoint using user credentials allowing execution of comma...
CVE-2026-27551
A low-privileged remote attacker can exploit a command injection vulnerability in the /index.php/ajax/parameterManage en